Privacy Policy

What we collect

When you submit a URL for scanning, we store: the submitted URL, the domain name, the scan result (score, checks, evidence), a timestamp, and your IP address for rate limiting. We do not collect cookies, analytics identifiers, or personal information beyond the IP address used for rate limiting.

How we use your data

• To run the scan and generate the report you requested.
• To rate-limit scans and prevent abuse.
• To display public score lists (domain name and score only - no personal information).
• To improve our scoring methodology over time.

Public visibility

Scan reports are public and accessible via stable URLs (e.g. /scan/yourstore.com). Anyone with the URL can view the report. Do not scan stores you do not own or have permission to evaluate if you are concerned about public visibility.

Data retention

Production scan records are retained for up to 180 days. Public pages show the latest completed report for a domain. Short-lived IP-based rate-limit counters expire automatically after their enforcement window.

What we do not do

• We do not sell scan data or use it for advertising.
• Infrastructure providers process limited data only to operate, secure, and monitor this service.
• We do not use tracking pixels or advertising cookies.
• We do not attempt to access authenticated or private pages on your store.
• We do not store the full HTML of scanned pages.

Contact

Questions about privacy? Email hello@paz.ai.