Privacy Policy

Who we are

Scanpoof ("we", "us", "our") operates the Scanpoof accessibility-monitoring platform. This policy explains what we collect, why, and the choices you have. Scanpoof is operated from the United States.

Information we collect

• •Account information: your name or company name, email address, and a securely hashed password. We never store passwords in plain text.
• •Sites you add: the website domains and sitemap URLs you ask us to monitor.
• •Scan results: the accessibility, performance and related findings our tools produce for your sites, plus your remediation notes.
• •Free-scan requests: if you run a public scan, the URL you enter and, if you provide it, the email address you submit.
• •Usage and log data: basic technical logs (IP address, browser type, timestamps) used to run and secure the service.
• •Billing information: we bill by invoice and do not collect or store card numbers on the platform.

What we deliberately do NOT collect

We read only the public pages of the sites you monitor — the same pages any visitor can see. We do not ask for your CMS logins, server access, or database. We do not collect your website visitors' personal data, and we do not use third-party advertising or tracking pixels.

How we use your information

• •To provide the service: run scans, generate reports and fixes, and show your dashboard.
• •To communicate with you: service notices, security alerts, and (if you opt in) product updates.
• •To bill you and manage your plan.
• •To secure and improve the platform and troubleshoot problems.

Legal bases (for visitors in the EU/UK)

Where the GDPR or UK GDPR applies, we process personal data to perform our contract with you (providing the service), on the basis of our legitimate interests (securing and improving the service), to meet legal obligations, and — where required — with your consent (for example, optional marketing email).

How we share information

We do not sell your personal data, and we do not share it for others' advertising. We use a small number of service providers (“subprocessors”) to run the platform — for example, cloud hosting and email delivery — who may process data only on our instructions. We may disclose information if required by law or to protect our rights, users, or the public.

Cookies

We use essential cookies only — a signed, HTTP-only session cookie that keeps you logged in. We do not use advertising or cross-site tracking cookies.

Data retention

We keep your account and scan history while your account is active so you can track progress over time. Archived sites are retained for a short restore window and then permanently removed. When you close your account, we delete or de-identify your personal data within a reasonable period, except where we must retain it to meet legal obligations.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. Residents of California (CCPA/CPRA) and the EU/UK (GDPR) have specific rights, including the right not to be discriminated against for exercising them. To make a request, email [email protected]. We do not sell personal information.

Security

We protect your data with encryption in transit (HTTPS/TLS), tenant isolation so no customer can see another's data, hashed API keys, and least-data-by-design practices. No system is perfectly secure, but we work to protect your information and to notify you of incidents where required.

International users

Scanpoof is operated from the United States. If you access the service from outside the United States, your information may be processed in the United States, where data-protection laws may differ from your own.

Children

The service is for businesses and is not directed to children. We do not knowingly collect personal data from anyone under 16.

Changes to this policy

We may update this policy from time to time. We will change the effective date above and, for material changes, take reasonable steps to notify you.

Contact us

Questions or requests about privacy: [email protected].