Privacy Policy

Last updated: November 17, 2025

1. Introduction

StackScan ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our security scanning service.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide to us when you register for an account, including:

  • Full name
  • Email address
  • Payment information (processed securely by PayPal)

2.2 Website Information

When you add websites to scan, we collect:

  • Domain names and URLs
  • Website verification tokens
  • Scan results and security findings

2.3 Usage Data

We automatically collect certain information when you use our Service:

  • IP address
  • Browser type and version
  • Pages visited and features used
  • Date and time of visits
  • Login and activity logs

3. How We Use Your Information

We use the collected information for:

  • Providing and maintaining the security scanning service
  • Processing your subscriptions and payments
  • Sending you email notifications about scan results and alerts
  • Improving and optimizing our Service
  • Detecting and preventing fraud or abuse
  • Complying with legal obligations
  • Communicating with you about service updates and support

4. Data Storage and Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes:

  • Encryption of data in transit using SSL/TLS
  • Secure password hashing
  • Regular security assessments
  • Access controls and authentication
  • Monitoring and logging of access

However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

5. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

  • Service Providers: We may share data with third-party service providers who perform services on our behalf (e.g., PayPal for payment processing, Resend for email delivery)
  • Legal Requirements: We may disclose your information if required by law or in response to valid requests by public authorities
  • Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business

6. Third-Party Services

Our Service uses third-party services that may collect information:

  • PayPal: Payment processing (see PayPal's Privacy Policy)
  • Resend: Email delivery service

7. Data Retention

We retain your personal information for as long as necessary to provide you with the Service and to comply with our legal obligations. When you cancel your account, we will delete your personal information within 30 days, except where we are required to retain it for legal purposes.

Scan results and reports may be retained for up to 90 days after account deletion for audit and legal compliance purposes.

8. Your Rights

You have the following rights regarding your personal data:

  • Access: You can request a copy of your personal data
  • Correction: You can update or correct your personal information through your account settings
  • Deletion: You can request deletion of your account and associated data
  • Portability: You can request your data in a machine-readable format
  • Objection: You can object to certain types of processing

To exercise these rights, please contact us through our support page.

9. Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are files with small amounts of data which may include an anonymous unique identifier.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

10. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us.

11. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us through our support page.