Privacy Policy

What we collect

• Account data: email address, plan, billing status
• Scan data: URLs you submit, page excerpts, findings and report evidence from publicly accessible pages
• Free scans without an account: a random identifier stored in a cookie so you can see your own result, and a salted one-way hash of your IP address used solely to limit abuse. We do not store the IP address itself and cannot recover it from the hash.
• If you provide an email to unlock a free report, we store that address and the site you scanned. Marketing email requires a separate, optional opt-in — unlocking your report never subscribes you to anything.
• Payments: handled by Stripe — we never see card numbers

What we don't do

• No advertising trackers, no third-party ad cookies
• No sale of personal data
• No storage of scanned image files (metadata only)

Legal bases & retention

We process account data to perform our contract with you, and scan data at your instruction. Free-tier scan data is retained for 12 months, then purged. You can request deletion of your account and associated data at any time.

Sub-processors

Supabase (EU region — database & auth), Netlify (hosting), OpenRouter (LLM analysis of public page text), Stripe (payments), Resend (transactional email).

Your rights

Under the GDPR you may access, rectify, export or erase your personal data, and object to or restrict processing. Contact privacy@euaiscanner.com. You may also lodge a complaint with your supervisory authority.