Effective Date: June 13, 2025

1. Developer Information
Developer: Tesdv
Email: daknalke@gmail.com

2. Data Collection
a) Types of Data Collected:
The extension collects the email message body content of emails being analyzed.

b) How Data is Collected:
Data is collected when the user opens an email message in Thunderbird while the PhishNet extension is active.

When an email is opened, the message body content is transmitted to the external server for phishing classification.

The extension does not automatically scan or transmit messages in the background, only the email message body of opened emails is analyzed.

c) Sources of Data:
The data comes solely from the user's Thunderbird email client through the extension.

3. Data Use and Purpose
The collected email body content is transmitted to a server solely for the purpose of running a machine learning model that detects potential phishing attempts.

The data is not used for any other purpose beyond this classification function.

4. Data Sharing
The email message body content is sent to a self-operated server hosted on Railway in Singapore.

The server is managed exclusively by Tesdv, and no third parties have access to this data.

No data is sold, shared, or disclosed to third-party entities.

5. Data Security
Data is transmitted over secure HTTPS connections.

The server does not store any of the email content after processing.

Data is processed in real-time and discarded immediately after prediction.

No personally identifiable information (PII), email headers, sender information, or user account data is collected or stored.

6. Data Retention
No data is stored on the server after processing.

Transmitted data exists in-memory only during processing and is not logged or retained.

7. User Rights
Since no user data is stored, there is no retained personal information for access, correction, deletion, or opt-out purposes.

Users may uninstall the extension at any time to discontinue its functionality.

8. International Data Transfers
Email body data is transferred to a server hosted in Singapore for processing.

As no data is stored or shared further, no additional cross-border data transfer protections apply.

9. Policy Updates
Any changes to this policy will be published directly on the extension's listing page.

Users should review the listing page for any updates.

Contact:
For any questions or privacy concerns, please contact: daknalke@gmail.com