Last updated: April 6, 2026
AI Malware Guardian ("we", "us", "our") operates the AI Malware Guardian desktop application and the website aimalwareguardian.com. This Privacy Policy explains what information we collect, why we collect it, and how we handle it.
Our product is designed with privacy as a core constraint: no file contents, no behavioral data, and no scan results ever leave your machine. All machine learning inference runs locally.
When you subscribe through Stripe, Stripe collects your name, email address, and payment information. We receive from Stripe only your email address and a Stripe subscription/customer ID. We do not store payment card details.
When you activate the application or when it checks your subscription status on startup, the following data is transmitted to our Cloudflare Worker API:
This information is used solely to verify that your subscription is active. We do not log or store individual verification requests beyond the subscription record itself.
We use your email address and subscription record to:
We do not sell your information to third parties. We do not use your information for advertising.
Subscription records (email + subscription ID + status) are stored in a Cloudflare D1 database hosted in Cloudflare's data centers. Data is encrypted at rest. Our Cloudflare Worker handles all API requests over HTTPS.
We retain your subscription record for the duration of your subscription and for up to 12 months after cancellation for accounting purposes, after which it is deleted.
We use the following third-party services:
You may request access to, correction of, or deletion of your account data at any time by emailing privacy@aimalwareguardian.com from the address associated with your account. We will respond within 30 days and delete your subscription record within that period, subject to our accounting and fraud-prevention retention obligations (see Section 4).
Our Software and service are not offered for sale or use within the European Economic Area (EEA), United Kingdom, or Switzerland (see our Terms of Service, Section 9). We block access from these jurisdictions at the website level. If you nonetheless access our website for informational purposes, the following disclosures are provided for transparency.
Lawful Basis for Processing (Article 6, GDPR): Where GDPR obligations apply, we process personal data on the following bases:
Data Subject Rights: You have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing based on legitimate interests. You also have the right to lodge a complaint with your national supervisory authority. To exercise these rights, contact privacy@aimalwareguardian.com.
International Data Transfers: Your subscription data is processed by Cloudflare (U.S.-based), Stripe (U.S.-based), and Resend (U.S.-based). Where personal data is transferred from the EEA to the United States, each sub-processor either participates in the EU-U.S. Data Privacy Framework or relies on Standard Contractual Clauses. See each provider's privacy policy for the applicable safeguard: Cloudflare, Stripe, Resend.
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) grant you the following rights with respect to your personal information:
Categories of Personal Information Collected (past 12 months): Identifiers — email address and a machine identifier hash (a SHA-256 derivative of hardware characteristics, not reversible to underlying hardware identity). We do not collect financial data, health data, biometric data, precise geolocation, or sensitive personal information. We do not use automated decision-making that produces legal or similarly significant effects on you.
To submit a CCPA/CPRA request, email privacy@aimalwareguardian.com from your account email address. We will verify your identity before fulfilling the request and respond within 45 days as required by law.
Shine the Light: California Civil Code § 1798.83 permits California residents to request a list of third parties to whom we disclosed personal information for direct marketing purposes in the preceding year. We do not disclose personal information to third parties for direct marketing purposes.
In the event of a security breach that results in unauthorized access to, or acquisition of, your personal information, we will notify affected users by email within 72 hours of our becoming aware of the breach, to the extent required by applicable law. Our notification will include: the nature of the breach; the categories of information affected; the steps we have taken or are taking to address the breach; and recommended steps you can take to protect yourself. We will also notify the applicable state attorney general or data protection authority as required by state and federal law.
Our service is not directed to children under 13. We do not knowingly collect personal information from children.
We may update this policy. If we make material changes, we will update the "Last updated" date above. Your continued use of the application after changes constitutes acceptance.
Questions about this policy: privacy@aimalwareguardian.com