SCANLYAPP PRIVACY POLICY

Effective Date: February 20, 2026
Last Updated: February 20, 2026

1. INTRODUCTION

This Privacy Policy explains how ScanlyApp ("ScanlyApp," "we," "our," or "us") collects, uses, stores, and discloses personal information when you use our website, dashboard, APIs, and related services (collectively, the "Service").

ScanlyApp provides automated QA scanning, issue tracking, performance diagnostics, and reporting for websites and web applications.

2. INFORMATION WE COLLECT

2.1 Account and Profile Information

When you create or use an account, we may collect:

• Name and display name
• Email address
• Authentication details (such as sign-in provider and session identifiers)
• Organization and workspace membership data

2.2 Billing and Subscription Information

For paid services, our Merchant of Record and payment processor may collect payment and billing details. We receive limited subscription and transaction metadata needed to manage access, invoicing, and support.

2.3 Scan and Project Data

When you configure and run scans, we may collect:

• Project settings (for example, base URLs, environments, scan configuration)
• Run metadata (status, duration, timestamps, issue counts)
• Discovered URLs and page-level diagnostics
• Issue records (severity, type, status, evidence references)
• Performance metrics (for example, Lighthouse and Core Web Vitals data)

2.4 Artifacts and Evidence Data

When scanning is enabled to capture evidence, we may store:

• Screenshots
• Trace files
• Network and related diagnostics
• Exported reports (for example, CSV, XLSX, PDF)

2.5 Technical and Device Data

We may automatically collect limited technical information, such as:

• IP address
• Browser and device information
• Log, error, and performance telemetry

3. HOW WE USE INFORMATION

We use information to:

• Provide and operate the Service
• Authenticate users and secure accounts
• Execute scans and generate QA outputs
• Store and present reports, issues, and artifacts
• Manage billing, subscriptions, and account limits
• Maintain security, prevent abuse, and enforce our Terms
• Provide customer support
• Improve product reliability and performance

We do not sell personal information.

4. LEGAL BASES FOR PROCESSING

Where applicable, we process personal information based on:

• Contract performance (providing requested services)
• Legitimate interests (security, abuse prevention, product reliability)
• Consent (where required by law)
• Legal obligations (compliance, accounting, lawful requests)

5. SHARING AND DISCLOSURE

We may share information with:

• Service providers and subprocessors that support hosting, storage, authentication, billing, analytics, and customer support
• Professional advisors (for legal, compliance, or audit needs)
• Government authorities or third parties when required by law, legal process, or to protect rights, safety, and security

We require service providers to handle information under contractual confidentiality and data protection obligations.

6. DATA RETENTION

We retain personal information for as long as needed to provide the Service and meet legal, accounting, and security requirements.

Retention periods vary by data type, including:

• Account data: while account is active, plus reasonable archival period
• Billing records: as required for tax/accounting obligations
• Scan artifacts/logs: according to plan limits, project settings, and operational needs

We may delete or de-identify data when it is no longer required.

7. SECURITY

We use administrative, technical, and organizational safeguards designed to protect information, including:

• Encryption in transit
• Access controls and least-privilege practices
• Monitoring and logging
• Regular security updates

No method of transmission or storage is completely secure. We cannot guarantee absolute security.

8. INTERNATIONAL DATA TRANSFERS

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers.

9. YOUR PRIVACY RIGHTS

Depending on your location, you may have rights to:

• Access personal information
• Correct inaccurate information
• Delete personal information
• Object to or restrict processing
• Data portability
• Withdraw consent where processing is based on consent

To exercise rights, contact us using the details below. We may need to verify your identity.

10. CHILDREN'S PRIVACY

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

11. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will post the updated version with a revised "Last Updated" date and provide additional notice where required by law.

12. CONTACT US

For privacy questions or requests, contact:

Email: hello@scanlyapp.com
Phone: +1 470 809 9231
Mailing Address: 1445 Woodmont Ln NW #1329, Atlanta, GA
Website: https://scanlyapp.com