Is It Bad .Email

Privacy Policy

Last updated: February 19, 2026

1. Who We Are

Is It Bad .Email is an email security analysis service operated by Maranatha Tech Solutions ("we," "us," "our"). Our service analyzes emails you submit to determine whether they are safe, suspicious, or dangerous.

If you have questions about this policy, contact us at privacy@isitbad.email.

2. Information We Collect

Account information: When you create an account, we collect your name, email address, and password (hashed). If you sign in with Google, we receive your name, email, and profile picture from Google.

Email content you submit: When you forward or upload an email for analysis, we receive and store the full email including headers, body text, HTML content, and any attachments. This is the core data we need to provide the service.

Payment information: If you subscribe to a paid plan, payment processing is handled entirely by Stripe. We do not store your credit card number. We store your Stripe customer ID and subscription status.

Usage data: We collect your IP address and browser user agent when you log in (stored with your session), and we track how many analyses you have used in the current billing period.

Analytics: We use PostHog to understand how people use our website. PostHog may set cookies or use local storage for session tracking. You can opt out by using your browser's Do Not Track setting.

3. How We Use Your Information

We use the information we collect to:

  • Analyze emails you submit and provide you with a security verdict
  • Send you verdict reply emails with analysis results
  • Manage your account and subscription
  • Enforce usage quotas and prevent abuse of the service
  • Improve the accuracy and performance of our analysis
  • Comply with legal obligations

We do not sell your personal information. We do not use submitted email content for advertising or marketing purposes.

4. How We Process Submitted Emails

When you submit an email for analysis, it passes through several automated checks. Each check examines a different aspect of the email. As part of this process, portions of the email content are shared with the following third-party services:

  • Cloudflare Workers AI: We send up to 6,000 characters of the email body text and subject line to an AI model hosted by Cloudflare to analyze the content for phishing, social engineering, and scam indicators. Cloudflare does not use your data to train models.
  • Google Safe Browsing: We check domain names from sender addresses against Google's threat database.
  • VirusTotal: If your plan includes attachment scanning, file attachments may be uploaded to VirusTotal for malware analysis. VirusTotal may make uploaded files accessible to security researchers. We check file hashes first and only upload files that are not already known to VirusTotal.
  • Cloudflare Browser Rendering: URLs found in the email may be visited by an automated browser to take screenshots and detect phishing pages. Screenshots are stored and may be included in your verdict email.

5. Third-Party Services

In addition to the analysis pipeline described above, we use the following services:

  • Stripe: Payment processing. Stripe's privacy policy applies to payment data.
  • Resend: Email delivery for verdict replies and account emails.
  • PostHog: Product analytics to understand website usage patterns.
  • Cloudflare: Infrastructure hosting (Workers, D1 database, R2 storage).

6. Data Retention

Submitted emails and analysis results are retained for the retention period associated with your plan (typically 30 days for free accounts). After the retention period, email content and associated data are deleted. Account information is retained for as long as your account is active.

7. Data Security

We use industry-standard security measures to protect your data, including encrypted connections (TLS), hashed passwords, and secure infrastructure provided by Cloudflare. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data and account
  • Request a copy of your data in a portable format
  • Object to or restrict certain processing

To exercise any of these rights, contact us at privacy@isitbad.email. We will respond within 30 days.

9. Cookies

We use cookies for authentication (keeping you logged in) and analytics (PostHog). Authentication cookies are essential for the service to function. Analytics cookies help us understand how the site is used.

10. Children

Our service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child under 13, contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date. Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions or requests, contact us at:

Maranatha Tech Solutions
Email: privacy@isitbad.email