📜 Privacy Policy — TrustCan.app
Effective Date: July 22, 2026
TrustCan.app ("we," "our," "us") provides a free tool for scanning links and emails for potential security risks. We respect your privacy and are committed to protecting your data.
TrustCan.app is a free service provided by Phenicie Business Management. We provide this tool for public benefit and awareness, not as a substitute for professional cybersecurity services.
1. Information We Collect
- User submissions: URLs, domains, or email addresses you submit for scanning.
- Scan results: Security data returned from our scanning partners (VirusTotal, AbuseIPDB, Shodan, Detectify).
- Technical data: Basic logs such as IP address, browser type, and timestamp.
- Lead/incident form data: If you choose to request a free incident triage or security baseline, we collect the contact and business details you provide (name, business name, email, phone, and the details of your request) so Phenicie Business Management can follow up. This is optional and separate from running a scan.
2. How We Use This Information
- To perform scans and provide results back to you.
- To monitor abuse, troubleshoot issues, and improve the service.
- To generate anonymized statistics for research and reporting.
3. Sharing
When you submit a link, domain, or IP address, we send it to the security providers we use to run that check — VirusTotal, AbuseIPDB, Shodan, and Detectify — for the sole purpose of returning a result to you. Each of those providers has its own privacy policy governing what it does with a submitted URL, domain, or IP address. When you submit an email file or pasted email text, only the links found inside it are sent to those same providers — the email body, subject, and headers are not sent to any third party. We never sell or rent your data to third parties.
4. Retention
- Submitted URLs and uploaded/pasted emails are processed in memory for the duration of the scan request and are not written to a database or file on our servers. Once the response is returned to your browser, TrustCan does not retain a copy.
- If you submit an incident report or a lead form (e.g. requesting a free security baseline), the information you provide is emailed directly to Phenicie Business Management's sales inbox so a person can follow up — that submission is retained as part of normal business correspondence, not in a separate TrustCan database.
- Basic technical logs (IP address hash, user agent, timestamp, and which endpoint was called) are kept in memory on the running server instance for abuse detection and are not persisted to a database; they do not survive a server restart or redeploy.
5. Your Rights
Because scan submissions are not stored after the request completes, there is typically nothing to delete from a completed scan. If you've submitted a lead or incident report and want that correspondence removed, contact us at sales@phenicie.com or call (406) 957-1576.