Privacy Policy

Site Structure ("we", "our", or "us") is committed to protecting your personal data. This policy explains what data we collect, how we use it, and your rights.

1. Data we collect

When you create an account or use Site Structure, we may collect:

• Email address and name (used to create and manage your account)
• URLs you submit for scanning (processed to deliver scan results, not stored long-term)
• Billing details (processed by Paddle: we never see your card number)
• Usage data such as scan counts, plan tier, and feature interactions
• Technical data: IP address, browser type, device type, and referrer URL

2. How we use your data

• To provide, operate, and improve Site Structure
• To process payments and manage subscriptions
• To send transactional emails (scan results, receipts, account notices)
• To send product updates and marketing emails: you can unsubscribe at any time
• To detect fraud, abuse, and security incidents
• To comply with legal obligations

3. Data sharing

We do not sell your personal data. We share data only with trusted third-party processors:

• Supabase: database and authentication hosting
• Paddle: payment processing and subscription management
• Vercel / Railway: application hosting and infrastructure

All processors are contractually bound to protect your data and use it only as directed by us.

4. Data retention

We retain your account data for as long as your account is active. Scan results are retained for 12 months from the date of the scan. You can delete your account and all associated data at any time from account settings.

5. Cookies

We use essential cookies for authentication and session management, and optional analytics cookies. See our Cookie Policy for details.

6. Your rights

Under GDPR and applicable data protection law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Data portability: receive your data in a machine-readable format
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email us at privacy@siloscout.io.

7. Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted storage, and restricted access to production systems. No system is 100% secure; if you discover a vulnerability please contact us responsibly.

8. Children's privacy

Site Structure is not directed at children under 16. We do not knowingly collect data from children.

9. Changes to this policy

We may update this policy from time to time. We'll notify you by email or in-app notice for material changes. Continued use of Site Structure after changes constitutes acceptance.

10. Contact

Questions? Email privacy@siloscout.io.