Privacy Policy

1. Information We Collect

We collect the following information:

• Account Information: Email address when you create an account. A scan requires an account — there are no anonymous scans.
• Scan Data: Store URLs you submit for scanning, and the public pages we fetch from that store (home, product, collection, policy and contact pages).
• Scan Results: Compliance reports generated by our scanner, stored on your account.
• Payment Information: Processed securely by Stripe (we do not store credit card details)
• Usage and ads measurement: Google Analytics (on most pages) and a Google Ads conversion tag so we can tell whether a scan signup or report unlock came from an ad. Ads landing pages load the conversion tag and skip extra marketing pixels (Meta, X, Clarity, OpenAI Ads). When you arrive from a Google ad we may store the click identifiers gclid, gbraid and wbraid on your account so we can join that click to a later purchase. Organic and direct visits have none.

2. How We Use Your Information

We use your information to:

• Provide GMC compliance scanning services
• Process payments and manage your account
• Send service updates and important notifications
• Improve our product and user experience
• Comply with legal obligations

3. Third-Party Services

We use the following third-party services:

• Supabase: Database and authentication
• Stripe: Payment processing
• ZenRows: Crawl proxy for pages our direct fetch cannot retrieve
• Render: Application hosting
• Resend: Transactional email
• Anthropic Claude: Extracts shipping, returns and contact fields from policy-page text
• Google Ads / Google Analytics: Conversion measurement and (on most pages) analytics

Each service has its own privacy policy governing how they handle data.

4. Data Retention

• Scan results: Stored on your account until you ask us to delete them. There is no anonymous-scan expiry, because scans require an account.
• Account Data: Until you request account deletion. Google Ads click identifiers stored on the account are deleted with it.
• Payment Records: 7 years (legal requirement)

Email legal@gmcscout.com or support@gmcscout.com to request deletion of your account and stored scans.

5. Your Rights

You have the right to:

• Access your personal data
• Request data deletion
• Export your data
• Opt out of marketing emails
• Update your information

6. Data Security

We implement industry-standard security measures including:

• Encrypted data transmission (HTTPS/TLS)
• Secure database with row-level security
• Regular security audits
• Limited employee access to data

7. Cookies

We use cookies and similar tags for:

• Authentication and session management
• Google Ads conversion measurement (signup and report unlock), including a click-ID cookie so a conversion after you create an account can still be attributed to the ad you clicked
• Google Analytics on most pages (not on the four Search ads landing pages)
• On most pages other than those ads landers: Meta, X, Microsoft Clarity and OpenAI Ads measurement pixels
• A first-party Meta click-id cookie (_fbc) when you arrive from a Meta ad, so a later purchase can still be attributed if browser cookies are capped

Advertising and analytics cookies stay off until you accept. You can decline. Changing your mind later: clear site cookies and reload, then choose again.

We do not sell your personal information. We do not send scan results to Google Merchant Center.

8. GDPR Compliance

For users in the European Union, we comply with GDPR requirements including:

• Lawful basis for processing (contract performance, legitimate interest)
• Right to data portability
• Right to be forgotten
• Data breach notification within 72 hours

9. CCPA Compliance

For California residents, we comply with CCPA requirements:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale of personal information (we do not sell data)
• Right to non-discrimination for exercising privacy rights

10. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect information from children.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by email or through our service.

12. Contact Us

For privacy-related questions or requests:

Tagan Labs LLC
30 N Gould St, STE R
Sheridan, Wyoming 82801, USA
Email: legal@gmcscout.com