Privacy Policy

Privacy Policy

Last updated: 30 September 2026

At a glance: We process the data we need to run Profit-Scanner: your account, your subscription and what you upload. Analytics tools (Google Analytics, Ahrefs, error replays) run only after you accept "Analytics" in the cookie banner, and Google Ads measurement only after you accept "Marketing"; you can change your choice at any time. We record IP addresses on security-sensitive actions to prevent abuse. Payments are handled by Stripe and emails are sent through Resend. We do not sell your data.

1. Data Controller

PROFIT SCANNER S.R.L., Str. Muncii Nr. 35, Bl. Tineret, Et. Parter, Ap. 3, Sat Crișcior, Comuna Crișcior, Județul Hunedoara, Romania · Trade Register J2026017431000 · CUI 54258972 · VAT RO54258972 · [email protected] · +40 729 749 776. Full details: Legal notice.

For any question about your personal data, or to exercise your rights, write to the email address above.

2. Data We Collect

2.1 Account

  • Email address: to create your account, sign you in and send you service messages.
  • Password hash: we store only a one-way hash (bcrypt), never your password.
  • Name (optional), language and display preferences.
  • Two-factor authentication: if you enable it, the TOTP secret needed to check your codes.
  • Google or Telegram sign-in: if you use it, the name, email and profile picture (Google) or the Telegram identifier, username and profile photo (Telegram) that they send us. We never receive your password.
  • Acceptance of the Terms and Privacy Policy and the confirmation that you are at least 18, with the date and the version you accepted.

2.2 Billing

Card details are collected and stored by Stripe, not by us. We keep your Stripe customer identifier, your subscription (plan, interval, status, renewal date), your billing details (consumer or business, country, address, VAT number when you give one) and, if you are a consumer, your request that the service start immediately (see the Terms, section 5.7). Invoices are issued through our invoicing provider and kept as required by tax law.

2.3 Content You Upload

Supplier price lists, product data, cost data, Amazon account data you connect (SP-API), support messages, testimonials and brand reports. You remain the owner (see the Terms, section 6).

2.4 Security and Abuse Prevention

  • IP address and browser on security-sensitive actions (sign-up, login, password reset, device verification, public forms) and the IP used at sign-up, to prevent abuse and rate-limit.
  • Device check at sign-up and login: a specialised provider helps us detect several accounts created from the same device ("trial farming"). It runs only in these security flows, within the European Union, under a data processing agreement, never for advertising.
  • One phone number per account, one free trial per person: if an account looks like one of several accounts of the same person, we may ask you to confirm a phone number by SMS. A phone number can be linked to only one account; the free trial is given once per person. To stop the trial from being taken repeatedly, we keep keyed hashes (HMAC) of the phone number, email inbox and device identifier — never the values in clear — for as long as the account exists and for 24 months after it is deleted.
  • Legal basis: legitimate interests (Art. 6(1)(f) GDPR; fraud prevention, Recital 47). These checks do not depend on your cookie choice. You can object at [email protected].

2.5 Analytics, Marketing and Error Monitoring

  • Your cookie choice. The banner has two optional categories. Analytics: Google Analytics, Ahrefs Analytics, our own page-view measurement and the first-visit cookie (section 2.6), and error replays (below). Marketing: Google Ads conversion measurement and its cookies. Nothing optional runs before you choose; you can change your choice at any time from "Cookie settings" (site footer or inside the app).
  • Google tag in consent mode. Google's tag loads on every visit with all storage denied by default. Without your consent it sets no cookies and sends Google only cookieless signals (for example that a page was viewed or an ad was clicked), which Google uses to estimate conversions in aggregate.
  • Error monitoring (Sentry). When something breaks, we receive a technical error report (error message, page, browser, technical context), without local variables. Legal basis: legitimate interest in a working, secure service. A replay of the moments before an error — with all text, inputs and images masked — is recorded only with your analytics consent.
  • Our own page views (path, time, a pseudonymised session identifier) are recorded only with your analytics consent and kept for 90 days.
  • Legal basis: your consent (Art. 6(1)(a) GDPR, Art. 5(3) ePrivacy Directive), which you can withdraw at any time; withdrawing also deletes the cookies these tools had set.

2.6 How You Found Us (Sign-up Source)

When you create an account, we record how you found Profit-Scanner:

  • Always, from the sign-up request itself: the sign-up method (email, Google or Telegram), the country estimated from your IP address (looked up in a database on our own server — your IP is not sent to anyone for this), your device type, browser and operating system and your browser's preferred language. If you signed up through a partner link, we record that the partner referred you.
  • Only if you accepted analytics: the first page you visited, the website that referred you (domain and path, without parameters), the campaign parameters (UTM) and ad-click identifiers (for example Google Ads gclid) of that first visit, when it happened, and how many pages you viewed before signing up.

We use this only to understand which channels bring us customers; it is not used for advertising profiles and is not shared. It is kept as long as your account exists. For accounts created before 24 September 2026 we did not copy any browser data; those records are marked as reconstructed.

2.7 Proof of Your Choices

We keep a record of each choice you make in the cookie banner (the categories, the banner version, the date, and a random identifier stored in your browser's consent cookie, linked to your account if you are signed in), of your acceptance of the Terms and of your request that the service start immediately. Purpose: to be able to prove your consent (Art. 7(1) GDPR) and your requests. Records linked to an account are deleted with it; records from visitors without an account are deleted after 3 years.

2.8 Affiliate Applications (no account required)

If you apply at /affiliate, we collect your email, name, promotion channels, audience size, the strategy you describe, and your IP and browser at submission, to review the application, prevent abuse and onboard you if approved. Legal basis: Art. 6(1)(b) and 6(1)(f) GDPR. Approved applications are kept while the affiliate account exists; others can be deleted on request.

2.9 Notices, Cancellations and Withdrawals

  • Notices of illegal content or copyright infringement (Report content): the notifier's name, email, the location of the content, the explanation and, for copyright, the work and signature. Legal basis: legal obligation (Art. 6(1)(c) GDPR; Digital Services Act, art. 16). Kept until the notice is handled and then as long as needed to establish or defend legal claims.
  • Cancellation and withdrawal requests (Cancel): the account email you enter, the time of the request, and, for a withdrawal, the amounts used to compute the refund and the decision. Legal basis: performance of the contract and legal obligation (consumer law). Withdrawal records are deleted with the account; accounting documents are kept as tax law requires.
  • Cancellation feedback you choose to give (optional).

3. Why We Use Your Data and Legal Basis

Purpose Legal basis
Account, sign-in, providing the Service Contract (Art. 6(1)(b))
Subscriptions, payments, invoices, withdrawals Contract (Art. 6(1)(b)); legal obligation for tax records and consumer rights (Art. 6(1)(c))
Service messages (confirmations, resets, receipts, renewal reminders, cancellation confirmations) Contract (Art. 6(1)(b)); legal obligation where the law requires a notice
Security, fraud prevention, error monitoring Legitimate interest (Art. 6(1)(f))
Notices of illegal content Legal obligation (Art. 6(1)(c))
Analytics, error replays, Google Ads measurement Consent (Art. 6(1)(a))
Product emails (section 3.1) Legitimate interest (Art. 6(1)(f)) with the right to object at any time
Understanding how users find us Legitimate interest for the sign-up request data; consent for the first-visit data

3.1 Product Emails

We send product news, tips and offers about Profit-Scanner to account holders.

  • Your choice at sign-up: the sign-up form (and, for Google and Telegram sign-ups, the next step) has an unticked box for product news and offers; you receive them only if you tick it.
  • During your free trial: we send a few emails about getting started and about the end of the trial, also if you did not tick the box (Art. 13(2) ePrivacy Directive, similar products). Each has an unsubscribe link, and unsubscribing stops them.
  • One unsubscribe for all of them: every product email has a one-click unsubscribe link (RFC 8058). Unsubscribing from any of them — or turning off the newsletter in the app — stops all product emails. Account and billing emails (confirmations, receipts, reminders required by law) are not affected.
  • What we record: the subscription and unsubscribe dates and source, the privacy policy version, and delivery events from our email provider (sent, delivered, opened, clicked, bounced, marked as spam), kept for up to 1 year. Your unsubscribe is kept as long as needed to respect it.
  • Frequency: at most 2 newsletter emails in any 24 hours.

4. Cookies

We use necessary cookies (session, security, your cookie choice) and, only with your consent, analytics and marketing cookies. Details in the Cookie Policy.

5. Who Receives Your Data

We share personal data only with the providers below, only as far as needed, under data processing agreements where they act on our behalf:

  • Stripe — payments and subscriptions (privacy).
  • Our invoicing provider — issuing and storing invoices, as tax law requires.
  • Resend — sending emails, and the delivery events described in section 3.1 (privacy).
  • Hosting in the European Union and Cloudflare — hosting, CDN and protection against attacks; traffic, including IP addresses, passes through Cloudflare (privacy).
  • The device-check provider and the SMS provider described in section 2.4.
  • OpenRouter (AI features) — a sample of your uploaded file (up to 30 rows), product titles and identifiers, and the messages you send to the support assistant; never credentials or payment data. The AI output is a suggestion you review; there is no automated decision with legal effect (Art. 22 GDPR) (privacy).
  • Market data providers — product identifiers only (EAN/ASIN), no personal data.
  • Amazon (SP-API) — only if you connect your seller account (privacy).
  • Google — sign-in with Google if you use it; Google Analytics and Google Ads only as described in section 2.5 (privacy).
  • Ahrefs — only with your analytics consent (Ahrefs privacy).
  • Sentry — error reports, and replays only with your analytics consent (privacy).
  • Authorities, when the law requires it.

We do not sell or rent personal data, and we do not share it for third parties' marketing.

6. Transfers Outside the EU

Our data is stored mainly in the European Union. Some providers (for example Stripe, Google, Sentry, Resend, OpenRouter) may process data outside the EU. We use them only with an adequate safeguard: an adequacy decision of the European Commission (including the EU-U.S. Data Privacy Framework for certified companies) or the Commission's Standard Contractual Clauses.

7. How Long We Keep Data

  • Account data and content: while the account exists; deleted after you delete the account (7-day grace period), except what the law requires us to keep.
  • Invoices and accounting records: as long as tax law requires.
  • Security logs: 30 days. Our page views: 90 days. Email delivery events: up to 1 year.
  • Anti-abuse hashes: while the account exists and 24 months after deletion.
  • Proof of choices: with the account; 3 years for visitors without an account.
  • Notices of illegal content: until handled, then as long as needed to establish or defend legal claims.

8. Your Rights

You have the right to access your data (Art. 15 GDPR), to rectify it (Art. 16), to erase it (Art. 17 — you can delete your account from your profile), to restrict processing (Art. 18), to portability (Art. 20 — you can export your data from your profile), to object to processing based on legitimate interest, including product emails (Art. 21), and to withdraw consent at any time without affecting earlier processing.

To exercise a right, write to [email protected]; we answer within one month. You can also complain to a data protection authority — in Romania the ANSPDCP (dataprotection.ro), or the authority of the country where you live or work (in Italy the Garante).

9. Security

Passwords are hashed (bcrypt), all traffic uses HTTPS/TLS, access to personal data is limited to what each person needs, systems are monitored, and backups are encrypted. To report a vulnerability, see Security.

10. Age

The Service is for people aged 18 and over. We do not knowingly collect data from anyone under 18; if we learn that we have, we delete it.

11. Changes to This Policy

We update this policy when our processing changes. We tell you about material changes by email before they apply, and the date at the top always shows the current version.

12. Contact

PROFIT SCANNER S.R.L., Str. Muncii Nr. 35, Bl. Tineret, Et. Parter, Ap. 3, Sat Crișcior, Comuna Crișcior, Județul Hunedoara, Romania · [email protected] · Legal notice