Skip to main content
We’re upgrading Seclum to RAVIONIX.
Back to RAVIONIX

Privacy

What we collect, and why.

A plain summary of how RAVIONIX handles personal data on this website and in the app. The full Privacy Policy is the authoritative version.

Reviewed September 2026

On this website

Strictly necessary cookies keep the site working. Optional analytics and product-usage cookies stay off until you turn them on through cookie preferences, and your choice is stored in your browser.

  • Accessibility tools on this site are provided by INCLUXA. They set no cookies and send no information about you when the page loads; your display preferences (such as text size) are stored only in your own browser.
  • If you choose to use an INCLUXA AI tool (for example, simplify or translate) or its feedback form, the page text or message you choose is sent to INCLUXA to process your request. Turning on a reading font loads it from Google Fonts or jsDelivr.

Free checker (no account)

You can run a few checks on this site without an account. Here is what happens to what you submit.

  • Links and text are hashed at our edge. The raw text is processed in memory by us and by our AI provider, Anthropic, to produce the verdict, then discarded.
  • Passwords are hashed in your browser and never leave your device. We receive the hash in memory, send Have I Been Pwned only its first 5 characters, and keep only that prefix.
  • Cloudflare Turnstile checks that you are a person. It processes your IP address and browser signals for bot protection.
  • The 3-checks-per-day limit uses a salted hash of your IP address, and the salt rotates weekly. No cookies, no fingerprinting.
  • What we keep: the hash of what you checked and the verdict. Each free check also writes a security-log entry with the weekly-salted IP hash and the hash of what you checked, kept for up to 2 years for abuse prevention. Nothing else from the check.

In the app (paying customers)

During early access, accounts are for existing users; once paid plans launch, they are for paying customers. When you sign in with Google or Microsoft we receive your name, email address and profile picture; Google or Microsoft handle your password and 2-step verification. We are the controller for this data. For a RAVIONIX Team customer's phishing-awareness training, the customer is the controller and we act as their processor.

  • We never store the raw URL, message or password you check — only hashes and verdicts.
  • Account holders can export or delete their data from settings.
  • We do not sell your data or use it for advertising.

Waitlist

If you email us to join the waitlist for paid plans, we keep your email address and message only to tell you when paid plans launch. We don't use it for anything else or share it. Ask us at hello@ravionix.com and we'll remove you.

Your rights

Depending on where you live, you may have rights to access, correct, export or delete personal data we hold about you as a controller — for example, contact details submitted through this site. Write to the data protection address below and we will respond within the statutory period.