Scanium

1. Who we are

Scanium ("Scanium", "we", "us", or "our") operates the website at https://scanium.ai and the Scanium website audit platform (the "Service").

For questions about this policy, contact us at info@scanium.ai.

2. What data we collect and why

2.1 Account information

When you create an account or sign in with Google OAuth, we collect:

Your name and email address (provided by Google or entered directly).
A profile record linking your identity to your projects and subscription.

Purpose: to authenticate you, manage your account, and send transactional messages (receipts, scan completion, billing notices).

2.2 Website URLs you submit for scanning

When you create a project, you provide a website URL. Scanium crawls that URL and the pages it links to in order to produce an audit report. The crawled HTML, metadata, and derived findings are stored in your account and may be included in reports you share with others.

Purpose: to deliver the core audit service you have requested.

2.3 Payment information

Payments are processed by Stripe. We never store your full card number or CVV. We receive and store a Stripe customer ID, subscription status, plan name, and invoice history to manage your subscription and display billing information.

Purpose: to process subscription payments, enforce plan limits, and provide billing history.

2.4 Usage and log data

We collect server logs, error reports, and scan job metadata (project IDs, timestamps, job durations, error codes) to operate, monitor, and improve the Service.

2.5 Cookies and analytics

We use session cookies required for authentication. We may also use privacy-respecting analytics to understand aggregate usage patterns. We do not use third-party advertising cookies.

3. Third-party processors

We share data with the following sub-processors to operate the Service:

Supabase — authentication, database storage, and file storage (hosted on AWS in the United States).
Stripe — payment processing and subscription management.
Google Cloud (Cloud Run) — our scanning backend infrastructure.
Anthropic / OpenAI — AI-generated report summaries and recommendations. Scanned page content may be sent to these services to produce findings. We do not permit these providers to use your data for model training.
Resend — transactional email delivery.

We do not sell your personal data to any third party.

4. Shared reports

If you create a public share link for a report, anyone with that link can view a summary of the audit findings for the submitted URL. You can revoke the link at any time from the report page, after which the shared URL will return a 404 error.

5. Data retention

Account data: retained while your account is active.
Project and report data: retained until you delete a project or close your account.
Payment records: retained as required for legal and accounting purposes (typically 7 years).
Server logs: retained for up to 90 days.

To request deletion of your account and associated data, email info@scanium.ai.

6. Your rights

Depending on your location, you may have the right to:

Access a copy of the personal data we hold about you.
Correct inaccurate data.
Request deletion of your data.
Object to or restrict certain processing.
Port your data in a machine-readable format.
Withdraw consent where processing is based on consent.

To exercise any of these rights, email info@scanium.ai. We will respond within 30 days.

7. Children

The Service is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

8. Security

We implement industry-standard security measures including TLS in transit, access controls, and encrypted storage. No system is completely secure; please contact us immediately at info@scanium.ai if you believe your account has been compromised.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the dashboard. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

10. Contact

For any privacy questions or to exercise your rights, contact us at:
Email: info@scanium.ai
Website: https://scanium.ai