Privacy policy

Last updated: [DATE]. Controller: [LEGAL ENTITY NAME], Georgia. We process data under GDPR where applicable.

What we collect

Domains you submit, scan results, your email (only if you request a full report or create an account), basic analytics (PostHog), and payment metadata from Paddle (we never see card numbers).

Why

To deliver scan reports, monitoring alerts and billing. Emails are used for the reports you request and product updates you can opt out of in one click.

Retention and rights

Free scan results are retained up to 12 months to power public score pages of scanned domains. You may request access, correction or deletion at privacy@anserra.io.

Subprocessors

Vercel (hosting), Supabase (database), Paddle (payments, merchant of record), Resend (email), PostHog (analytics), Railway (workers).