This Privacy Policy explains how ScanCompliant, Inc. ("ScanCompliant," "we," "us," or "our") collects, uses, discloses, and safeguards your information when you use our website and platform services. Please read it carefully.
1. Overview
ScanCompliant operates a regulatory compliance review platform that helps businesses in the dietary supplement and natural products industries identify potentially risky marketing language in their content. In providing these services, we collect and process certain personal information about you.
We are committed to protecting your privacy and handling your information in an open and transparent manner. This policy applies to all users of our website at scancompliant.com and our application platform.
2.1 Information You Provide Directly
- Account Information: Name, email address, company name, job title, industry, and password when you create an account or start a free trial.
- Content Submitted for Review: URLs, documents, images, PDFs, and other marketing content you submit to the ScanCompliant platform for compliance scanning. This content may include proprietary business information.
- Payment Information: Billing name, address, and payment card details. Card numbers are processed directly by our payment processor (Stripe) and are never stored on our servers.
- Communications: Messages you send us through contact forms, email, or support channels.
- Clara AI Interactions: Queries and conversations you have with our Clara AI Compliance Assistant within the platform.
2.2 Information We Collect Automatically
- Usage Data: Pages visited, features used, scan frequency, time spent on platform, and interaction patterns.
- Device & Browser Data: IP address, browser type and version, operating system, device identifiers, and screen resolution.
- Log Data: Server logs including access times, error logs, and referring URLs.
- Cookies and Similar Technologies: See Section 5 for details.
2.3 Information from Third Parties
- Social media platforms (Instagram, Facebook) when you authorize us to connect your accounts for compliance scanning.
- Identity verification and fraud prevention services.
- Marketing and analytics partners, subject to their own privacy policies.
3. How We Use Your Information
We use the information we collect for the following purposes:
- Providing Services: Operating the compliance scanning platform, generating findings reports, and powering Clara AI responses.
- Account Management: Creating and managing your account, processing subscriptions, and providing customer support.
- Platform Improvement: Analyzing usage patterns to improve features, fix bugs, and develop new capabilities. Content you submit may be used in aggregate, anonymized form to improve our claim-risk detection models.
- Communications: Sending transactional emails (receipts, scan completion notices, account alerts), product updates, and — with your consent — marketing communications.
- Safety and Security: Detecting and preventing fraud, abuse, and security incidents.
- Legal Compliance: Fulfilling our legal obligations and enforcing our Terms of Service.
We do not sell your personal information or the content you submit for scanning to third parties.
4. Sharing Your Information
We share your information only in the following circumstances:
- Service Providers: Trusted third-party vendors who assist in operating our platform, including cloud hosting (Google Cloud), payment processing (Stripe), email delivery, and analytics. These parties are contractually bound to protect your information and use it only for the services they provide to us.
- Business Transfers: In the event of a merger, acquisition, or sale of all or part of our assets, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.
- Legal Requirements: When required by law, court order, or government authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
- With Your Consent: For any other purpose with your explicit consent.
5. Cookies & Tracking Technologies
We use cookies and similar technologies to operate and improve our services. You can manage cookie preferences through your browser settings. See our full Cookie Policy for details.
- Essential Cookies: Required for the platform to function (authentication, session management).
- Analytics Cookies: Google Analytics to understand how users interact with our platform.
- Preference Cookies: Remember your settings and preferences.
- Marketing Cookies: Used only with your consent to deliver relevant advertising.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide services. Specifically:
- Account data is retained for the duration of your subscription plus 90 days after account closure.
- Scan content and findings reports are retained for 12 months and then deleted, unless you export or delete them earlier.
- Clara AI conversation history is retained for 90 days.
- Billing records are retained for 7 years as required by law.
- You may request deletion of your data at any time. See Section 8.
7. Security
We implement industry-standard security measures to protect your information, including:
- TLS/SSL encryption for all data in transit.
- AES-256 encryption for data at rest.
- Role-based access controls limiting employee access to personal data.
- Regular security audits and vulnerability assessments.
- Multi-factor authentication options for user accounts.
No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. See our Security & Data Policy for full details.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete information.
- Deletion: Request deletion of your personal information ("right to be forgotten").
- Portability: Request your data in a portable format.
- Objection: Object to processing of your information for direct marketing.
- Restriction: Request restriction of processing in certain circumstances.
- Withdraw Consent: Where processing is based on consent, withdraw it at any time.
To exercise any of these rights, contact us at support@scancompliant.com. We will respond within 30 days. California residents have additional rights under the CCPA; EU/UK residents have rights under GDPR.
9. Children's Privacy
ScanCompliant is a professional business platform not directed at children under 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, contact us immediately and we will delete it.
10. International Data Transfers
ScanCompliant is based in the United States. If you access our services from outside the US, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country. By using our services, you consent to this transfer. For EU/UK users, we rely on Standard Contractual Clauses approved by the European Commission as the legal mechanism for international transfers.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email and by posting a prominent notice on our website at least 30 days before the change takes effect. Your continued use of our services after the effective date constitutes acceptance of the updated policy.
For privacy-related questions, requests, or concerns:
For EU/UK users, you also have the right to lodge a complaint with your local data protection authority.
This policy was last reviewed and updated on June 1, 2026. Previous versions are available upon request.