What Carmen never does
What Carmen reads, what stays on your device, and what you control.
Carmen only reads.
Carmen never sends, replies to, forwards, moves or deletes an email. It never sends a text. It never fills in a form, types a password, clicks a link for you or changes a page. It never blocks a page or a message. It tells you what it found and you decide what to do.
Carmen watches nothing until you choose it.
On a new install nothing is on. The page check, the sites the extension watches, your inbox and your texts are each a switch. Turn any of them off at any time and Carmen stops at once.
Carmen extension

Carmen app

Ask Carmen, the new web app

What never leaves your device.
In the browser and on the phone, personal details (names, email addresses, phone numbers, card and account numbers, addresses, dates of birth, ID numbers, crypto wallets) are removed on the device before anything is sent for automatic screening. Texts from people in your contacts never leave the phone. iMessages are never read. Nothing is sent while you hover with Magic Mouse. On a site the extension does not know, Magic Mouse sends only the links and numbers it found and not the page itself. Trusted sites are cleared on your computer with no network call.

What Carmen never reads.
Carmen never reads what you type into forms, your passwords, your browsing history, your cookies, your clipboard, texts from your contacts, or mail in a mailbox you have not connected.
What is kept, and for how long.
Carmen keeps the verdict, the reasons, which account it was for, and when. Anything you paste or attach yourself is kept with its result so you can come back to it. Emails Carmen screens are kept for 30 days for the case record, then deleted. Content the extension keeps on your computer is encrypted and deleted after seven days. Raw Magic Mouse captures are deleted after one hour. Carmen does not keep what it screens on your phone.

No person reads what Carmen screens.
Screening is done by software. A person only looks at a case if you ask for expert help, which is a separate paid service, and only at that case.
Carmen does not track you or sell your data.
There is no advertising tracking or analytics inside the extension or the app. Carmen never sells or shares your data.
When Carmen cannot verify something.
Carmen says what it could not verify and gives Medium risk instead of Low.
Disconnect when you choose.
Disconnect a mailbox, turn off a switch, or delete your account (30 day grace period) from Settings. Access is revoked at once.
At work.
Company portal admins can review flagged items, including the verdict and reasons. Admins can also see connection status and check counts.