Office Guard Home reads each message once, as it arrives, looks for the marks of a scam, and lets it go. There is no copy on our side. That is the whole design, and everything below follows from it.
Each message is checked in memory the moment it arrives and discarded. What stays is a record of the warning: the kind of scam, who it came from, and when. Not the message, not the attachments, not your other mail. Warnings show in your account for 30 days, except a "Was this you?" question, which stays until you answer it; the record of each warning is kept for 12 months, then deleted. If your plan ends, the records are deleted after 30 days.
On iPhone, the Office Guard Home app sees only texts from numbers not in your contacts; Apple shows it nothing else. On Android, it reads the one-to-one texts your texting app shows in its notifications, contacts included, and skips group conversations. When the app is unsure it asks our server about the number and the words, which are checked and discarded. No text is stored anywhere.
For Outlook you sign in with Microsoft, and you can revoke that from your Microsoft account page any time. For Gmail and the others you create an app password, which you can delete from your provider's account page any time. We use it only to check your mail, and it is encrypted at rest with a key kept apart from the data. Delete your account and the connection is removed at once.
A document you send is encrypted in your browser before it leaves. We hold the locked file and never the whole key; the link and the words you give the recipient are what open it. The file expires, and you can close it early.
The organizer of a Family plan sees, for each member: their name and email address, whether they accepted, whether their mailbox is connected, and how many warnings fired for them in the last 30 days. The monthly report shows the same count for the month. That is a count, not a message. Never the sender, never the subject, never the mail.
Each member can turn the count off from their own family page, and the organizer cannot turn it back on. The organizer can remove a member, and a member can leave from their own family page. Either ends the member's protection and nothing else: the member keeps their own account, on the free plan.
In the app, Settings, then Delete my account; on the website, your account page, then Delete my account. The mailbox connection and your account details are removed at once, the warnings and everything else we held are deleted within 30 days, and a Family plan's members are told their coverage has ended. A subscription bought in an app store is canceled in the store's own subscription settings; we cannot cancel it for you, and we tell you so before you delete.
Office Guard Home is made by Office Guard, LLC, and the same notices govern it: the privacy policy, the mailbox monitoring notice, and the terms of service. A security concern? Write to security@officeguard.co.