Privacy Policy

ScanYour.site ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web security scanning service. Please read this policy carefully.

Information you provide directly:

• Account information: name, email address, and hashed password.
• Payment information: processed and stored securely by our payment processor (we never store raw card data).
• Domain names you submit for scanning.
• Communications you send to our support team.

Information collected automatically:

• IP address (logged per scan for legal compliance).
• Browser type, device type, and operating system.
• Pages visited and features used within the Service.
• Scan timestamps and consent records (mandatory for legal compliance).

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Process your scans and deliver security reports to you.
• Manage your account and authenticate your identity.
• Process payments and send billing-related communications.
• Detect, prevent, and investigate unauthorized or fraudulent use.
• Comply with legal obligations, including IP-logging requirements for security scanning.
• Improve the Service through aggregated, anonymized usage analytics.
• Send transactional emails (e.g., scan results, account verification, password reset).

We do not sell, rent, or share your personal data with third parties for marketing purposes.

We retain your account information for as long as your account is active. Scan results and associated logs are retained for a rolling 90-day period on Free plans and 365 days on Pro/Business plans. IP logs related to scan consent are retained for 2 years for legal compliance purposes.

You may request deletion of your account and associated data at any time by emailing support@scanyour.site. Some data may be retained in encrypted backups for up to 30 days after deletion.

We implement industry-standard security measures including TLS encryption in transit, bcrypt password hashing, and encrypted database storage. Access to production systems is restricted to authorized personnel only. Despite these measures, no method of transmission over the Internet is 100% secure.

We use strictly necessary cookies (e.g., authentication session tokens) to operate the Service. We do not use third-party tracking cookies, advertising cookies, or behavioral analytics platforms. You can disable cookies in your browser settings, but this will prevent login from functioning.

We use a limited set of trusted third-party services to operate:

• Google Gemini API — for AI-powered report generation (scan data is sent securely; see Google's privacy policy).
• Stripe — for payment processing (card data never touches our servers).
• Oracle Cloud — for infrastructure hosting (data stored in secure data centres).
• Resend — for transactional email delivery.

Depending on your location, you may have the right to:

• Access a copy of the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing activities.
• Data portability (receive your data in a machine-readable format).

To exercise any of these rights, contact us at support@scanyour.site.

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via a notice on the Service. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

For any privacy-related questions or requests, contact our team at support@scanyour.site.