On the billeye.ai website and services (the "Site"), we respect and are committed to protecting the privacy of our users. This Privacy Policy details what information is collected when using the Site and the tools it offers (such as the HookEye threat and phishing scanning system), how we use it, and what your rights are.
1. Information We Collect
Anonymous and technical information: while browsing the Site, we may collect statistical and technical data (such as browser type, operating system, IP address and session duration) for security, analysis and user-experience improvement purposes.
Personal information at sign-in (Social Login): when you choose to sign in using third-party services (such as Google or Apple), we receive basic identifying data from you (such as email address and name) according to the permissions you granted with those services, for the purpose of managing your account and access permissions.
Content checked through HookEye: when you submit a suspicious message or link to the system for checking, that content is collected and processed by the system, including through artificial intelligence models and external cross-referencing services, for the purpose of identifying phishing threats (see details in section 3, and in section 5 regarding sharing with third parties).
Inquiries and contact: details you choose to provide of your own accord when contacting us (for example through the email address contact@billeye.ai).
2. Use of Cookies and Advertising (Google AdSense)
Third-party cookies: the Site uses third-party advertising services, such as Google AdSense, which display ads tailored to your interests based on your visits to the Site and other sites on the web.
Cookie management: you can control or block cookies at any time through your browser settings, or through Google's own preference-management interfaces.
3. Data Processing, Artificial Intelligence (AI) and Data Retention Policy
The HookEye system uses artificial intelligence technologies to analyze messages and website addresses in real time, in order to identify cyber threats. The system's data retention policy operates as follows:
Raw logs and user data (window of up to 72 hours): for the purpose of preventing abuse, detecting attacks, and showing your own check history on your dashboard, the system retains the raw message content linked to your account for a short period of up to 72 hours (to allow an operational safety margin and to handle maintenance cases). After this window, the raw content data and the personal link to the user are deleted or fully anonymized.
Normalized threat database (Threat Intelligence, unlimited duration): website addresses (URLs) identified as malicious undergo a sanitization process and the complete removal of any identifying detail. These normalized links are stored in the Site's global threat database for an unlimited period, for the purpose of broad protection, avoiding duplicate queries (cache), and security research.
Anonymous technical log data (with no user identification), collected during the scanning process, including user type, country of origin, device type and pricing plan, is retained for a period that is not predetermined, for analytics, service-improvement and abuse-control purposes. After the 72-hour window described above, we are unable to link this data back to a specific user account. From this log data, the Site produces aggregated displays and analyses, such as a breakdown of the countries of origin of checks and threats, shown, among other things, in the analytics dashboards of PRO subscribers.
4. Limitation of Liability and Disclaimer
The services and tools on the Site (including HookEye) are provided "as is". The Site operator does not undertake that the system will detect every existing phishing threat, and bears no liability for erroneous results or for any damage arising from reliance on the scan results. Use of the Site is at the user's own responsibility.
5. Sharing Information with Third Parties
We do not sell or transfer personal information to third parties, except to committed technology infrastructure providers bound by confidentiality, advertising platforms (such as Google AdSense), or in the case of a binding legal demand.
In addition, for the purpose of identifying and analyzing phishing threats, links and/or message content that you submit for checking through HookEye may be transferred to external information-security services and third-party Threat Intelligence databases (including relevant Google services), for the purpose of cross-referencing the findings and improving the accuracy of the check.
6. Contact
For questions or requests regarding this Privacy Policy, you can contact us at: contact@billeye.ai