ScanexAI
Get Started Log in

LEGAL

Privacy Policy

Effective date: 1 June 2025  ·  Last updated: 30 July 2026

ScanexAI ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what personal information we collect when you use our website and services, how we use it, who we share it with, and how you can exercise your rights.

If you have questions about this policy or your personal data, contact us at privacy@scanexai.com.

1. Information We Collect

Account data: name, email address, and a hashed password when you register.

Scan data: target URLs you submit, crawled page metadata, detected vulnerability findings, risk scores, and AI-generated reports. This data is stored under your account and is not shared with third parties except as described below.

Usage data: pages visited, features used, login times, and scan history. Used to improve the platform.

Cookies and tracking data: we use first-party session cookies for authentication and third-party cookies for analytics and advertising as described in Section 4.

2. How We Use Your Information

  • To provide, maintain, and improve the ScanexAI platform
  • To generate security reports and AI breach narratives from your scan data
  • To send transactional emails such as scan completion notifications and account alerts
  • To respond to your support requests and enquiries
  • To detect and prevent abuse or unauthorised use of the platform
  • To comply with legal obligations

We do not send marketing emails without your explicit consent. We do not sell, rent, or broker your personal data to any third party.

3. Data Sharing & Third Parties

We share data only with the following categories of third parties, each under appropriate data processing agreements:

  • Cloud hosting and infrastructure providers (servers, databases, CDN) that process data on our behalf
  • Email delivery services used to send transactional emails
  • Analytics providers (Google Analytics) that help us understand site usage in aggregate
  • Advertising networks — see Section 4 for details on Google AdSense
  • We may also disclose data where required by law or to protect rights, safety, or property

4. Advertising & Google AdSense

We use Google AdSense to display advertisements on some pages of this website. Google AdSense uses cookies, including the DoubleClick cookie, to serve ads based on your prior visits to this website and other websites on the internet.

The use of advertising cookies enables Google and its partners to serve ads to you based on your visit to our site and/or other sites on the internet. You may opt out of personalised advertising by visiting Google Ads Settings.

Alternatively, you can opt out of a third-party vendor's use of cookies for personalised advertising by visiting aboutads.info/choices or the Network Advertising Initiative opt-out page.

Google's use of advertising cookies is governed by the Google Advertising Policies. We do not control the content of ads served by Google.

  • Google AdSense may collect your IP address, browser type, and pages visited on this site to serve relevant ads
  • You can manage or disable cookies through your browser settings at any time
  • Disabling advertising cookies will not disable ads — you will see non-personalised ads instead
  • We comply with the IAB Europe Transparency and Consent Framework where applicable

5. Cookies

We use the following categories of cookies:

  • Essential cookies — required for login sessions and security; cannot be disabled
  • Analytics cookies (Google Analytics) — help us understand how visitors use the site in aggregate
  • Advertising cookies (Google AdSense/DoubleClick) — used to serve personalised ads; can be opted out via Google Ads Settings

See our full Cookie Policy for more detail.

6. Your Rights

  • Access — request a copy of the personal data we hold about you
  • Correction — ask us to correct inaccurate or incomplete data
  • Deletion — request that we delete your account and associated data
  • Portability — export your scan history and account data via the dashboard
  • Objection — object to processing of your data for advertising purposes
  • Withdraw consent — you can withdraw any previously given consent at any time

To exercise any of these rights, email privacy@scanexai.com. We will respond within 30 days.

7. Data Retention

We retain your account data for as long as your account is active. Scan data is retained for up to 12 months after the scan is run. You may delete individual scans or your entire account at any time via the dashboard or by contacting us.

Anonymised, aggregated usage statistics may be retained indefinitely for product improvement purposes.

8. Contact & Changes

If you have questions about this policy, contact us at privacy@scanexai.com or visit our Contact page.

We may update this Privacy Policy from time to time. Material changes will be notified via email to registered users. Continued use of the platform after changes constitutes acceptance.