At Phish Net, we take your security and privacy seriously. Here's how we protect your information.
All data transmitted to and from Phish Net is encrypted using HTTPS/TLS. Data at rest is encrypted using industry-standard encryption provided by our secure cloud hosting platform.
We use secure OAuth authentication through trusted providers including Google and Microsoft. We do not store or manage passwords directly—your credentials are handled by these industry-leading authentication services.
We never sell your data to third parties. You have full control over your information:
- View and delete your scan history anytime from the History page
- Delete your community posts whenever you want
- Update or remove your profile information in Settings
- Control your notification preferences
Your scan data (URLs and screenshots) is sent to our AI service providers for analysis and stored securely so you can access your history. We retain this data to provide you with the service you've subscribed to.
Phish Net is hosted on a secure cloud platform that provides:
- Secure cloud hosting with redundant backups
- DDoS protection and rate limiting
- Real-time monitoring and incident response
- Regular security patches and updates
To provide our services, we work with trusted third-party providers:
- AI Analysis: Your submitted content is sent to AI service providers for threat detection
- Payment Processing: Stripe (web), Apple App Store (iOS), Google Play (Android)
- Authentication: Google, Microsoft OAuth
These providers have their own security measures and privacy policies. We carefully select partners who meet high security standards.
If you discover a security vulnerability, please report it responsibly to our security team at:
Email: security@phishnetapp.com
We appreciate responsible disclosure and will acknowledge your report within 48 hours.