1. Introduction

ScanU ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our visual regression testing platform.

We are compliant with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

ScanU.eu is the data controller for the personal data collected through our platform. For any privacy-related inquiries, please contact us at: privacy@scanu.eu

3. Data We Collect

3.1 Account Information

Email address (required for account creation)
Name (optional)
Password (securely hashed, never stored in plain text)

3.2 Project Data

Project names and website URLs you choose to test
Test configuration settings (browsers, resolutions, thresholds)
Screenshots of websites you test
Visual diff comparisons

3.3 Usage Data

Number of tests run
Subscription tier and billing status
Timestamps of account activities

3.4 Technical Data

IP address (for rate limiting and security)
Browser type and version (for error tracking)

4. How We Use Your Data

We use your data to:

Provide and maintain our visual regression testing service
Process your subscription payments via Stripe
Communicate with you about your account and service updates
Improve our platform and develop new features
Ensure security and prevent abuse
Comply with legal obligations

5. Legal Basis for Processing (GDPR)

Under GDPR, we process your data based on:

Contract performance: To provide the services you signed up for
Legitimate interests: To improve our services and ensure security
Legal obligations: To comply with applicable laws
Consent: Where specifically requested

6. Data Storage and Retention

All data is stored on servers located in Frankfurt, Germany (EU) via DigitalOcean infrastructure. Screenshots and related media are stored using DigitalOcean Spaces (S3-compatible storage) in the Frankfurt region.

Retention periods:

Free tier: Screenshots retained for 30 days
Pro tier: Screenshots retained for 365 days
Account data: Retained while account is active + 30 days after deletion

7. Third-Party Services

We use the following third-party services:

Stripe: Payment processing (PCI-DSS compliant)
DigitalOcean: Cloud hosting and storage (EU datacenter)
Sentry: Error monitoring (for service reliability)

9. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

Encryption in transit (TLS/HTTPS)
Secure password hashing (bcrypt)
Access controls and authentication
Regular security assessments
Rate limiting and abuse prevention

10. Cookies

We use cookies to operate our website. When you first visit, a cookie consent banner allows you to accept or reject non-essential cookies. Essential cookies (for authentication and session management) are always active as they are strictly necessary for the website to function.

We categorize cookies into four types: Essential, Functional, Analytics, and Marketing. No non-essential cookies are set until you give explicit consent. You can change your cookie preferences at any time by clicking the "Cookie Settings" link in the website footer.

For full details about the cookies we use, their purposes, and durations, please see our Cookie Policy.

11. Children's Privacy

Our service is not directed to children under 16. We do not knowingly collect personal data from children under 16.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through a notice on our platform.

13. Contact Us

For any questions about this Privacy Policy or our data practices, contact us at:

Email: privacy@scanu.eu
Data Protection Officer: dpo@scanu.eu

14. Supervisory Authority

If you are in the EU and believe we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection authority.

Privacy Policy