Effective Date: September 23, 2025
Last Updated: September 23, 2025
1. Information We Collect
Information You Provide:
- Domain names for scanning
- Email address for account creation
- Payment information (processed by Stripe)
- Contact form submissions
- Support inquiries
Information Collected Automatically:
- Scan results and security findings
- IP addresses and browser information
- Usage data and analytics
- Cookies and similar technologies
- Timestamp of all activities
Third-Party Data:
- Shodan API data about scanned domains
- Public DNS records
- SSL certificate information
- Publicly available security data
2. How We Use Your Information
We use collected information to:
- Perform security scans and generate reports
- Process payments and maintain records
- Send scan results and important updates
- Improve our services and develop new features
- Comply with legal obligations
- Detect and prevent fraud or abuse
- Provide customer support
3. Information Sharing
We DO NOT sell your personal information.
We may share information with:
- Service Providers: Payment processors, security data providers, and public AI providers for analysis assistance
- Legal Requirements: When required by law, subpoena, or court order
- Protection: To protect our rights, property, or safety
- Business Transfers: In case of merger, sale, or acquisition
- Consent: With your explicit permission
4. Data Retention
We may retain your information for:
- Scan Results: 90 days for customer access
- Payment Records: 7 years for tax compliance
- Account Information: Duration of account plus 30 days
- Legal Compliance: As required by applicable laws
- Security Logs: 12 months for fraud prevention
5. Data Security
We implement industry-standard security measures including:
- Encryption of data in transit (TLS/SSL)
- Encrypted storage of sensitive information
- Regular security assessments
- Access controls and authentication
- Secure payment processing via Stripe
However, no system is 100% secure. We cannot guarantee absolute security of your information.
6. Your Rights and Choices
You have the right to:
- Access: Request copies of your personal information
- Correction: Update inaccurate information
- Deletion: Request deletion (subject to legal requirements)
- Opt-out: Unsubscribe from marketing communications
- Data Portability: Receive your data in a portable format
To exercise these rights, email privacy@scanity.ai
7. Cookies and Tracking
We use cookies and similar technologies for:
- Authentication and security
- Remembering preferences
- Analytics and performance monitoring
- Functionality improvements
You can control cookies through browser settings, but disabling them may affect service functionality.
8. Children's Privacy
Our service is not intended for children under 18. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.
9. International Data Transfers
Your information may be transferred to and processed in the United States or other countries. By using our service, you consent to these transfers.
10. California Privacy Rights
California residents have additional rights under the CCPA, including:
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of sale (we do not sell data)
- Right to non-discrimination
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes by email or prominent notice on our service. Continued use after changes constitutes acceptance.