Frequently Asked Questions

SteelGaze analyzes submitted email for phishing risk and presents a classification, confidence, and available content, authentication, link, and model signals. It does not guarantee that a message is safe or malicious.

Forward an authorized message to the shared scan@steelgaze.app address or connect a compatible standard IMAP inbox using TLS. See Email Integrations.

Yes. Results are probabilistic and can contain false positives, false negatives, missing evidence, or stale external signals. Verify high-impact messages independently and keep layered email-security controls.

Starter includes 30 scans per month and one monitored inbox. Plus is USD $4 per month with one monitored inbox and 1,000 scans. Pro is USD $8 per month with three monitored inboxes and 2,500 scans. Taxes may apply and paid subscriptions renew automatically. Enterprise is contact-based.

Current providers include Contabo, Supabase, Resend, Purelymail, Cloudflare, Google, and our Merchant of Record. URLs found in submitted messages may be sent to Google Web Risk for threat-reputation checks. Our Merchant of Record processes billing, tax, fraud-prevention, and transaction information.

Payments are processed by Creem, our Merchant of Record. Creem is responsible for payment processing, invoicing, and applicable tax collection. SteelGaze is responsible for delivering the service, customer support, and product-related enquiries.

Saved scan history and mailbox content currently remain until operational deletion or a verified deletion request. Automatic 90-day deletion is not yet enforced. Disconnecting an inbox does not erase prior history.

Gmail-derived messages and results are never used for general AI/ML model training. Eligible non-Google submissions require explicit consent through the applicable data-contribution settings.

Use the account-deletion control in Settings. SteelGaze verifies your current password, revokes connected Google credentials, removes account data, signs out active sessions, and deletes the authentication account. You can also download a JSON export or delete saved history separately before deletion.