Privacy policy

Last updated: [date]. ScanDesk is run by [Company legal name], [registered address], [country] (“we”).

What we collect

Your account details (name, email and a securely hashed password), billing details handled by our payment provider, the documents you upload for reading, the results we extract from them, and the basic technical logs needed to run and secure the service.

Your documents

Uploaded files are sent to our AI provider to be read and are not stored by us. The extracted text, tables, chart data, summaries and translations are stored in your account and deleted automatically 30 days after upload. You can delete any scan, or your whole account, at any time. We do not use your documents to train AI models, and our AI provider does not use them for training under its commercial terms.

Our role

For the documents you upload, you (or your organisation) decide what is processed and why, and we process them only on your instructions. Under laws such as the EU and UK GDPR this makes you the controller and us your processor. For your account and billing data, we are the controller. Business customers can request our data processing agreement at [support email].

Why we process your data

We process account and document data to provide the service you signed up for, billing data to meet legal and tax obligations, and logs to keep the service secure.

Who we share data with

Only the service providers needed to run ScanDesk: [hosting provider] (hosting and database), Anthropic (AI document reading), Stripe (payments) and [email provider]. Each is bound by a data processing agreement. Your data may be processed in countries other than your own; where the law requires it, we use approved safeguards such as standard contractual clauses.

Cookies

We use one essential cookie to keep you signed in. We do not use advertising or tracking cookies.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your data, and to object to or restrict how it is used. Email [support email] and we will respond within the time your local law requires. You can also complain to your local data protection authority.

Security

Encrypted connections, hashed passwords, access limited to your own account, and automatic deletion of results.