Last updated: October 15, 2026.
PayOrScam is operated by Suntec AI LLC, 30 N Gould St Ste R, Sheridan, WY 82801 ("we").
Files you upload (invoices, images) are processed in memory to produce your report and are not stored. We keep the resulting report (the extracted details, the checks and their results) for up to 30 days so you can view it, then delete it automatically.
To check whether a logo or signature was copied from elsewhere, we may make an image from your upload available at a random, unlisted address for a few minutes so Google Lens (via our search provider Serper) can search it. It's held in memory only and deleted right after the search.
To check a document we send the relevant text or image and the extracted details (such as company name, website, email, phone or bank account number) to processors acting for us: OpenAI (AI analysis), Serper (web search), and public registers and threat lists (e.g. IOSCO I-SCAN, GLEIF, Companies House, domain registries, OpenPhish, URLhaus, Google Safe Browsing). We use OpenAI's API, which by default does not use API data to train its models.
We store a one-way hash of your IP address for up to 2 days to enforce free-check limits; we don't store raw IP addresses. If you buy a plan, payments are handled by our payment processor; we don't see or store full card numbers. If you contact us, we keep your message and email to respond.
We use one strictly necessary cookie if you buy a plan (to remember your check credits). Our free pages and the free preview may show ads from Google AdSense. Google and its partners may use cookies to serve and measure ads, including personalised ads where you've consented. Visitors in the EEA, UK and Switzerland are asked for consent through a Google-certified consent banner, and you can change your choice at any time from that banner. Learn more at How Google uses information from sites that use its services and manage ad personalisation at Google Ad Settings. Ads never appear inside paid reports.
You can ask us to access or delete your data, or object to processing (including under the GDPR/UK GDPR and CCPA), via our contact form. Legal basis: providing the service you request (contract) and our legitimate interest in preventing fraud.
Please don't upload documents with more personal data than needed. You can black out details that aren't relevant to the check.