1. Introduction
AuditCrow is operated by 4D Services ("we", "us", "our"). This Privacy Policy explains how we collect, use, and protect information when you use auditcrow.com (the "Service"). We are committed to protecting your privacy and handling your data transparently.
2. Information We Collect
Scan data: When you submit a URL for scanning, we store the URL and the resulting report data (scores, issues, page analysis). This data is associated with a randomly generated scan ID - not with any personal identifier.
Waitlist email: If you choose to join our waitlist, we collect your email address and your marketing consent preference. We do not collect any other personal information.
Technical data: We may collect standard server logs including IP addresses, browser type, and referring pages. This data is used for rate limiting (5 scans per hour per IP) and service monitoring.
3. How We Use Your Information
- Scan reports: To generate, store, and display your website health report via a shareable URL.
- Waitlist: To notify you about AuditCrow product updates and new features, only if you have given marketing consent.
- Rate limiting: To prevent abuse by limiting the number of scans per IP address.
- Service improvement: To understand usage patterns and improve the Service.
4. Data Retention
We do not store reports permanently. Scan results are retained on our side for up to 90 days - within that window a repeat scan of the same domain returns the same report - and a copy stays available in the browser you ran the scan in. Waitlist email addresses are retained until you request removal. You can request deletion of your data by contacting us.
5. Data Sharing
We do not sell, rent, or trade your personal information. Note that scan reports are keyed to the scanned domain: anyone who scans the same domain within the retention window sees the same report. We may share anonymised, aggregated data for analytical purposes.
6. Cookies
For details on how we use cookies, please see our Cookie Policy.
7. Your Rights
Under applicable data protection laws (including UK GDPR), you have the right to:
- Request access to the personal data we hold about you.
- Request correction or deletion of your personal data.
- Withdraw your marketing consent at any time.
- Lodge a complaint with the Information Commissioner's Office (ICO).
8. Security
We implement appropriate technical and organisational measures to protect your data, including SSRF protection, rate limiting, and restrictive database access policies.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the most recent revision.
10. Contact
For privacy-related enquiries, please contact us via 4D Services.