Privacy Policy
Last Updated: October 30, 2025
1. Information We Collect
We collect the following information:
- Account Information: Email address when you create an account
- Scan Data: Store URLs you submit for scanning
- Scan Results: Compliance reports generated by our scanner
- Payment Information: Processed securely by Stripe (we do not store credit card details)
- Usage Analytics: Anonymous usage data to improve our service
2. How We Use Your Information
We use your information to:
- Provide GMC compliance scanning services
- Process payments and manage your account
- Send service updates and important notifications
- Improve our product and user experience
- Comply with legal obligations
3. Third-Party Services
We use the following third-party services:
- Supabase: Database and authentication
- Stripe: Payment processing
- ScraperAPI: Web scraping infrastructure
- Anthropic Claude: AI-powered policy analysis
Each service has its own privacy policy governing how they handle data.
4. Data Retention
- Scan Results: 30 days for anonymous scans, unlimited for paid users
- Account Data: Until you request account deletion
- Payment Records: 7 years (legal requirement)
5. Your Rights
You have the right to:
- Access your personal data
- Request data deletion
- Export your data
- Opt out of marketing emails
- Update your information
6. Data Security
We implement industry-standard security measures including:
- Encrypted data transmission (HTTPS/TLS)
- Secure database with row-level security
- Regular security audits
- Limited employee access to data
7. Cookies
We use essential cookies for:
- Authentication and session management
- Remembering your preferences
We do not use advertising or tracking cookies.
8. GDPR Compliance
For users in the European Union, we comply with GDPR requirements including:
- Lawful basis for processing (contract performance, legitimate interest)
- Right to data portability
- Right to be forgotten
- Data breach notification within 72 hours
9. CCPA Compliance
For California residents, we comply with CCPA requirements:
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of sale of personal information (we do not sell data)
- Right to non-discrimination for exercising privacy rights
10. Children's Privacy
Our service is not intended for users under 18 years of age. We do not knowingly collect information from children.
11. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any material changes by email or through our service.
12. Contact Us
For privacy-related questions or requests:
Tagan Labs LLC
30 N Gould St, STE R
Sheridan, Wyoming 82801, USA
Email: legal@gmcscout.com