Privacy Policy

What we collect

When you submit a URL for scanning, we store: the submitted URL, the domain name, the scan result (score, checks, evidence), a timestamp, and your IP address for rate limiting. We also use PostHog to collect basic usage information such as page views, browser/device details, approximate geography, and referrer. It runs without session replay, autocapture, advertising features, or persistent browser storage. We do not send submitted store URLs, scan IDs, query strings, or report evidence as analytics events.

How we use your data

• To run the scan and generate the report you requested.
• To rate-limit scans and prevent abuse.
• To display public score lists (domain name and score only - no personal information).
• To improve our scoring methodology over time.
• To understand aggregate site usage and improve the service.

Public visibility

Scan reports are public and accessible via stable URLs (e.g. /scan/yourstore.com). Anyone with the URL can view the report. Do not scan stores you do not own or have permission to evaluate if you are concerned about public visibility.

Data retention

Production scan records are retained for up to 180 days. Public pages show the latest completed report for a domain. Short-lived IP-based rate-limit counters expire automatically after their enforcement window.

What we do not do

• We do not sell scan data or use it for advertising.
• Infrastructure providers process limited data only to operate, secure, and monitor this service.
• We do not use analytics data for advertising personalization.
• We do not attempt to access authenticated or private pages on your store.
• We do not store the full HTML of scanned pages.

Contact

Questions about privacy? Email hello@paz.ai.