Privacy Policy

What we collect

• Account data: email address, plan, billing status
• Scan data: URLs you submit, page excerpts, findings and report evidence from publicly accessible pages
• Free scans without an account: a random identifier stored in a cookie so you can see your own result, and a salted one-way hash of your IP address used solely to limit abuse. We do not store the IP address itself and cannot recover it from the hash.
• Account data: your email address, and the sites you have scanned. Marketing email requires a separate, optional opt-in at sign-up — creating an account never subscribes you to anything, and every marketing email carries a one-click unsubscribe link.
• Payments: handled by Stripe — we never see card numbers

What we don't do

• No advertising trackers, no third-party ad cookies
• No sale of personal data
• No storage of scanned image files (metadata only)

Legal bases & retention

We process account data to perform our contract with you, and scan data at your instruction. Free-tier scan data is retained for 12 months, then purged. Paid-tier scan data is retained for as long as your subscription is active; if you downgrade to the free plan, the same 12-month retention applies to your data from that point forward. You can request deletion of your account and associated data at any time.

Sub-processors

Supabase (EU region — database & auth), Netlify (hosting), OpenRouter (LLM analysis of public page text), Stripe (payments), Resend (transactional email).

Your rights

Under the GDPR you may access, rectify, export or erase your personal data, and object to or restrict processing. Contact support@euaiscanner.com. You may also lodge a complaint with your supervisory authority.