Privacy Policy

The Fraud Doctor™ is a Canadian fraud preparedness and education service. For any privacy question or request, contact info@thefrauddoctor.ca or call (604) 283-0182.

We only collect what we need to deliver what you asked for:

• Readiness assessment answers. Your responses and resulting score, so we can show your results and recommend a next step. The assessments do not ask for account numbers, passwords, or financial details.
• Contact and enquiry details. Your name, email, topic, and message when you use the contact form.
• Order and delivery details. What you bought and the mailing address needed to send your kit.
• Orders. Enrolling your household in a protection programme completes a purchase, and payment is processed by Stripe — we never see or store your card details.
• Payment details. If you later complete a paid order, Stripe, our payment processor, handles the payment. We do not store your full card number — we receive only a payment confirmation and the last few digits of the card.
• Basic site analytics. Each recorded event includes the event name, the page you were on, an anonymous session identifier, and the referring page. This is not used to identify individuals.

• To show your assessment results and recommend the right pathway
• To answer your questions and schedule your Guided Setup session
• To fulfil orders, mail kits, and manage memberships
• To send scam alerts, the Monthly Scam Briefing, and member updates — only if you signed up for them
• To understand, in aggregate, which pages and resources families find useful

We do not sell your personal information, and we do not rent or trade your email address. We do not use your information for advertising profiles.

We use a small number of service providers to run the business: a cloud database and authentication provider to store your records securely, Stripe for payments, and an email delivery provider for confirmations and briefings. They may only use your information to provide their service to us.

We may disclose information if required by law, or where necessary to protect someone from harm.

During a Guided Setup session, you remain in control of your own devices and accounts — your device, your clicks. We do not log into your bank account and we do not ask for banking credentials. Your Bank Setup Checklist is yours to take to your own bank.

Sessions are not recorded unless we tell you in advance and you agree. Anything your family shares during a session stays confidential.

When you enrol, we use your name, email address and selected option to process your order, send service-related messages and contact you about the requested programme. These messages are part of the service you requested and are not dependent on marketing consent.

If you separately choose to receive Canadian fraud alerts, preparedness tips and information about The Fraud Doctor’s services, we record that choice, when it was made, the wording version shown and where it was collected. This optional choice does not affect your order.

You may withdraw marketing consent at any time by using the unsubscribe link in a marketing email or contacting info@thefrauddoctor.ca. Withdrawing marketing consent does not prevent us from sending messages needed to complete or administer an order or service you requested.

The Scam Checker is an AI-assisted educational screening tool that identifies warning signs and helps Canadians decide what to verify before acting. It does not determine that a message, person or website is legitimate.

What you should never submit. Do not submit passwords, PINs, one-time security codes, SINs, full financial account or card numbers, or health information. Submitted content is processed to generate the automated educational assessment.

AI processing. The checker produces an automated educational assessment of the wording submitted. It does not make decisions about a person’s eligibility, legal rights, access to services or financial accounts. The AI may examine visible URL wording and patterns contained in the submitted text. No live third-party URL-reputation database is currently queried. Submitted content is sent through our hosting and backend infrastructure to Lovable's AI Gateway, which passes it to Google Gemini. The Fraud Doctor does not store the raw submission or generated result in its own database. What each provider does with content on its own systems is governed by its own policies, not by us — we do not control or promise their retention or model-training practices. Cloudflare Turnstile is used to confirm you are a person, not a script.

Link-reputation providers. Where a link-reputation provider is enabled in the deployed checker, submitted link addresses may be sent to it and the result will say whether that check completed. We do not name a provider here unless it is active in production. At the date shown at the top of this policy, no third-party link-reputation provider is enabled — we do not use Google Safe Browsing, Google Web Risk or VirusTotal. If we enable one, we will name it in this section before or when it goes live.

Retention and deletion. The Fraud Doctor does not store the raw submission or generated result of your check in our own database. We keep only limited anti-abuse records — a usage count and a one-way hashed version of your IP address — for a short period to prevent overuse of the free tool. Because submissions are not stored against your identity, we generally cannot locate a past check to delete it; you can request deletion of any record we do hold about you by emailing info@thefrauddoctor.ca.

International processing. Content you submit may be processed outside Canada, including in the United States or other jurisdictions where service providers operate. What each provider does with content on its own systems is governed by its own policies, not by us — we do not control or promise their retention or model-training practices.

Human review. No person at The Fraud Doctor™ reads your submission unless you ask us to. Need more certainty? Private Fraud Doctor sessions are available for high-stakes situations. Active members receive preferred rates. If you book a private review, the content you send us for that review is stored in our records so we can respond, and is kept only as long as needed for that purpose.

Assessment results and member records are kept while your relationship with us is active, and for a reasonable period afterwards so we can honour follow-ups and warranties. Order and payment records are kept as long as Canadian tax and business record rules require. Contact form messages are kept only as long as needed to resolve your enquiry. You can ask us to delete your information sooner.

Information is stored with reputable cloud providers, transmitted over encrypted connections, and access is restricted to the people who need it to do their work. No system is perfect, so we also keep collection to a minimum — the safest data is the data we never asked for.

Under Canadian privacy law you can ask us what personal information we hold about you, ask us to correct it, ask us to delete it, or withdraw your consent to marketing email at any time. Every briefing and alert includes an unsubscribe link. To make a request, email info@thefrauddoctor.ca. We will respond within 30 days.

Our services are intended for adults. We do not knowingly collect information from children under 13.

Restricted administrator authentication, used only by our internal team, uses your browser's local storage, not a cookie. Anonymous site analytics uses your browser's session storage, which clears when you close your browser. We do not use advertising or cross-site tracking cookies.

We cannot promise the site is entirely free of cookies, since our hosting provider and embedded third-party tools — such as the abuse-prevention check built into our Scam Checker — may set essential technical cookies of their own.

If we make a meaningful change, we will update this page and, where appropriate, notify members by email.