Privacy Policy

Personal Information We Collect

When you visit IntelliScan.co, we automatically collect certain information about your device, including information about your web browser, IP address, time zone. We refer to this automatically-collected information as "Device Information."

Moreover, we might collect the personal data you provide to us (including but not limited to Name, Email, Organization, Domain ownership information, security scan results, etc.) during registration to be able to fulfill our security scanning services.

Specific to our security scanning service, we also collect:

• Domain verification records and tokens
• Website URLs you submit for scanning
• Security scan results and vulnerability reports
• Usage statistics and scan history
• Payment information for paid plans

Why Do We Process Your Data?

Our top priority is customer data security, and, as such, we may process only minimal user data, only as much as it is absolutely necessary to maintain the website and provide our security scanning services. Information collected automatically is used only to identify potential cases of abuse and establish statistical information regarding website usage. This statistical information is not otherwise aggregated in such a way that it would identify any particular user of the system.

You can visit the website without telling us who you are or revealing any information, by which someone could identify you as a specific, identifiable individual. If, however, you wish to use some of the website's features, such as security scanning services, domain verification, or receiving scan reports, you may provide personal data to us, such as your email, first name, last name, organization, and domain information.

You can choose not to provide us with your personal data, but then you may not be able to take advantage of some of the website's features. For example, you won't be able to perform security scans, verify domain ownership, or receive detailed vulnerability reports. Users who are uncertain about what information is mandatory are welcome to contact us via privacy@intelliscan.co.

Data Storage and Third-Party Services

We use the following third-party services to provide our security scanning platform:

• Supabase: For secure database storage of user accounts, domain verifications, and scan results
• Amazon Web Services (AWS): For cloud infrastructure and computing resources
• n8n: For workflow automation and scan orchestration
• Analytics Services: For website performance monitoring and user experience improvement

All scan results and personal data are processed and stored securely using industry-standard encryption and security practices. Scan results are processed temporarily during the scanning process and stored only as long as necessary to provide our services.

Your Rights

If you are a European resident, you have the following rights related to your personal data:

• The right to be informed
• The right of access
• The right to rectification
• The right to erasure
• The right to restrict processing
• The right to data portability
• The right to object
• Rights in relation to automated decision-making and profiling

If you would like to exercise any of these rights, please contact us through the contact information below.

Additionally, if you are a European resident, we note that we are processing your information in order to fulfill contracts we might have with you (for example, if you purchase a scanning plan through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information might be transferred outside of Europe, including to the United States, for processing by our third-party service providers.

Data Retention

We retain your personal data only for as long as necessary to provide our services and comply with legal obligations:

• Account information: Retained while your account is active and for 30 days after deletion
• Scan results: Retained for 90 days unless you request earlier deletion
• Domain verification records: Retained while domains remain verified
• Usage logs: Retained for 12 months for security and analytics purposes

Data Breach Notification

If our systems are compromised and your data is affected, we will notify you as soon as possible via email and/or website notice, in compliance with applicable laws.

Links to Other Websites

Our website may contain links to other websites that are not owned or controlled by us. Please be aware that we are not responsible for such other websites or third parties' privacy practices. We encourage you to be aware when you leave our website and read the privacy statements of each website that may collect personal information.

Information Security

We secure information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use, or disclosure. We keep reasonable administrative, technical, and physical safeguards to protect against unauthorized access, use, modification, and personal data disclosure in its control and custody. However, no data transmission over the Internet or wireless network can be guaranteed to be 100% secure.

Legal Disclosure

We will disclose any information we collect, use or receive if required or permitted by law, such as to comply with a subpoena or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this policy.

Contact Information

If you would like to contact us to understand more about this Policy or wish to contact us concerning any matter relating to individual rights and your Personal Information, you may send an email to privacy@intelliscan.co.

For general inquiries, you can also contact us at contact@intelliscan.co.