Privacy policy
Haunch ("we", "us") runs AI decoy personas that talk to scammers and pass what the scammers reveal to organizations that can block them. This page explains what information we handle, why, and what your choices are. We keep it short on purpose. If something is unclear, email [email protected].
The short version. We don't run ads or sell data. We keep what scammers send our decoys and share it with banks, exchanges, carriers and law enforcement. If you forward a scam to us, we keep your number only to send you updates about that case, and you can stop at any time.
1. Website visitors
haunch.ai is served by Cloudflare, which keeps standard server logs (IP address, browser type, pages requested) for security and performance. We don't use advertising trackers, analytics cookies or social-media pixels. The site stores a few preferences, such as whether you turned motion off, in your own browser only.
2. Pilot requests
If you fill in the pilot form, we store the details you give (name, work email, organization, type, message) and the country your request came from, so we can reply. They're kept in our Cloudflare account and emailed to the Haunch team. We use them only to talk to you about a pilot. We delete them on request.
3. People who forward a scam to Haunch
When you forward a scam text or email to a Haunch number or address, we keep:
- the scam message you forwarded, and the scammer's number or address you give us;
- your phone number or email address, so we can confirm receipt and send you updates about that case.
We use your number only for messages about scams you forwarded. We don't send marketing. Message frequency varies with the case. Message and data rates may apply. Reply STOP to any Haunch text to stop all messages, or HELP for help. No mobile information is shared with third parties or affiliates for marketing or promotional purposes. Opt-in information is never shared with anyone.
4. Scammers our decoys talk to
Our decoys are fictional. Everything a scammer sends them (messages, phone numbers, bank accounts, wallet addresses, links, payment handles) is stored, checked, sealed into a tamper-evident record and shared with organizations that can act on it: the receiving bank's fraud team, exchanges and stablecoin issuers, phone carriers, domain registrars, and law enforcement. We may also publish anonymized excerpts of these conversations. We remove anything that could identify a real person before we publish, and we never publish names. A lead is not an accusation: the receiving organization checks before it acts.
If a decoy discovers that the person it's talking to is not running a scam, it stops, and we add the number to a do-not-contact list.
5. What we never do
- We don't sell or rent personal information.
- We don't hack back, trace, or install anything on anyone's device.
- Our decoys never send money or real personal data.
- We don't use a real person's name, photo or details for a decoy.
6. Service providers
We use Cloudflare (hosting, storage, email), Anthropic (the AI model behind the decoys), and a telecommunications provider to send and receive text messages. Each handles data on our behalf under its own terms. We share data with the organizations listed in section 4 so they can block scams.
7. How long we keep things
Scam conversations and the evidence records built from them are kept for as long as they're useful for blocking scams and supporting investigations. Pilot-request details are kept until the conversation with you ends or you ask us to delete them. Forwarders' numbers are deleted when you reply STOP, except for the record that you opted out.
8. Your rights
You can ask what we hold about you, ask us to correct or delete it, or object to our use of it. Email [email protected]. Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act or the GDPR; we honor them. We don't knowingly collect information from children under 16.
9. Security
Data is encrypted in transit. Evidence records are hash-chained so that any later change is detectable. Access is limited to the Haunch team.
10. Changes
If this policy changes, we'll update the date at the top. Material changes to how we treat forwarded scams or pilot requests will be announced on this page.