Privacy Policy

Elderus Advisors ("Elderus," "we," "us," or "our") operates elderus.org. This Privacy Policy describes what information we collect, how we use it, and your choices regarding that information. We are committed to protecting your privacy — particularly because we serve an audience that has been disproportionately targeted by those who exploit personal information.

1. Information We Collect

Scam Checker — Text Submissions

When you type a description of a suspicious communication into the Scam Checker, the text is processed by our server to identify potential scam patterns. Text submissions are not sent to any third party. Analysis is performed using our own pattern-matching engine. Submissions are logged for quality improvement purposes (timestamp, text, matched result) in an internal audit log. We do not associate submissions with your identity, IP address, or any personal information.

Scam Checker — Screenshot Uploads

When you upload a screenshot, the image is transmitted to Anthropic, Inc.'s API for text extraction using their Claude AI model. Anthropic processes the image to extract text only — the extracted text is then analyzed by our screener engine. We do not store uploaded images after processing. Anthropic's data handling is governed by their own privacy policy and terms of service.

Newsletter Signup

When you sign up for our newsletter, we collect your email address and the audience segment you identify with (senior, family member, or institution). This information is used solely to deliver our newsletter. We do not sell, rent, or share your email address with third parties. You may unsubscribe at any time.

Fraud Drill (beta)

If you enroll in Fraud Drill, we collect your first name, email address, state of residence and, if you choose, a mobile number, along with a record of your consent and which practice messages you received and clicked. We use this only to run the drills you signed up for and to show the shared log to you and the person you enrolled with.

Text Messages

Mobile numbers are used only to send the Fraud Drill practice texts you agreed to and to answer STOP and HELP replies. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-message opt-in data and consent are never shared with any third party.

Analytics

We use Cloudflare Web Analytics, a privacy-focused analytics service that does not use cookies, does not collect personal information, and does not track individual users across sites. It provides us with aggregate data about page views, referrers, and device types. No personally identifiable information is collected through our analytics.

2. Information We Do Not Collect

We want to be explicit about what we do not do:

— We do not use cookies for tracking or advertising.

— Outside Fraud Drill, we do not collect your name, phone number or address. We never collect financial information.

— We do not sell or share personal information with advertisers or data brokers.

— We do not require account creation to use any feature of the Site.

— We do not store uploaded screenshots after text extraction is complete.

3. How We Use Information

— Scam Checker audit logs: To improve our pattern-matching accuracy, identify emerging scam trends, and report aggregate statistics (e.g., "42% of submissions this month matched government impersonation scams").

— Newsletter emails: To deliver scam alerts and educational content you signed up for.

— Aggregate analytics: To understand which pages and features are most useful to our audience.

4. Third-Party Services

We use the following third-party services:

— Anthropic, Inc. — AI processing for screenshot text extraction only. See Anthropic's Privacy Policy.

— Cloudflare — DNS, SSL, and privacy-focused web analytics (no cookies, no personal data).

— Render.com — Web hosting.

— Twilio — Delivers Fraud Drill text messages (receives only the mobile number and the message).

— Buttondown — Newsletter delivery (receives only your email address and audience segment).

5. Data Retention

Scam Checker audit logs are retained for quality improvement and trend analysis. Newsletter subscriber information is retained until you unsubscribe. We do not retain uploaded screenshots — images are processed in memory and discarded after text extraction.

6. Data Security

All communications with elderus.org are encrypted via HTTPS/TLS. We do not store passwords, financial information, or sensitive personal data. Our hosting provider (Render.com) maintains industry-standard security practices. While we take reasonable measures to protect information submitted through the Site, no internet transmission is 100% secure.

7. Children's Privacy

This Site is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

8. California Privacy Rights

If you are a California resident, you have the right to request information about the categories of personal information we have collected about you and the purposes for which it is used. Because we collect minimal personal information (email address only, and only if you subscribe to the newsletter), most CCPA provisions do not apply. You may contact us at any time to request deletion of your information.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review this page periodically.

10. Contact

If you have questions about this Privacy Policy or wish to request deletion of your data, please contact us at [email protected].