Privacy policy

PresenceScope (“we”, “us”) operates presencescope.com and app.presencescope.com and is responsible for the information described here. You can reach us about anything in this policy at info@presencescope.com.

• Account information. Your email address and a password, which our authentication provider stores only in hashed form. We use your email to sign you in and to send account emails such as address confirmation and password resets.
• Business and website details you submit. The business name, website address, city, category and country you enter for a scan.
• Scan results. The scores, findings and report we generate from the public pages of the website you submit. For scans run from an account we also keep a copy of the HTML of the pages read, as evidence for the findings.
• A pseudonymous network identifier. When you run a scan without an account, we compute a keyed one-way hash (HMAC) of your IP address to enforce fair-use limits. We do not store your IP address itself, and the hash cannot be turned back into it without a secret key held only by our servers.
• Technical information. Like any website, our hosting provider receives your IP address, browser user agent and the address of each page you request, and records them in its request logs.

We do not use analytics, advertising or tracking tools, and we do not load third-party scripts.

• To run scans and show you their results, and to provide your account — because you asked us to (performance of our agreement with you).
• To prevent abuse of the scanner and keep the service secure, using rate limits and the network identifier above — our legitimate interest in operating a safe, reliable service.
• To reply when you contact us.

We do not sell personal information or use it for advertising.

You can submit a website from our home page without signing up. We scan it and give you a private preview link. The link contains a random token that is the only way to open that preview, so treat it like a password: anyone who has it can view the preview and save the scan to their own account. We store only a one-way hash of the token.

If you then sign in or create an account, you can save that same scan to your account. It then becomes part of your account data.

We set only cookies that the service needs to work:

• Sign-in cookies from our authentication provider, which keep you signed in.
• A preview cookie (ps_anon_claim) set when you run a scan without an account. It holds a one-way hash of your preview token, is sent only to preview pages, and expires with the preview, so the scan can be saved to your account after you sign in.

No cookies are used for analytics or advertising.

• Previews of scans run without an account are available for 72 hours. If the scan is not saved to an account, it is deleted — together with its network identifier — by our daily maintenance run after the preview expires.
• Saved scans: the record linking a saved scan to the original anonymous request, including its network identifier, is deleted 30 days after the scan was run. The scan itself stays in your account.
• Page evidence (the HTML copies of scanned pages) is deleted 30 days after the scan completes. Scores and findings are kept.
• Report share links you have revoked, or that have expired, are deleted 30 days later.
• Your account, businesses and scans are kept until you delete them or ask us to delete your account. Deleting an account removes its businesses, scans, reports, share links and stored evidence.
• Request logs are kept by our hosting provider under its own retention policy.

We use two infrastructure providers:

• Supabase — database, file storage and authentication. Our database is hosted in Supabase’s Asia-Pacific (Singapore) region.
• Vercel — hosting; it serves the website and runs the scanner.

They process information on our behalf to provide these services. We do not share personal information with anyone else unless the law requires us to.

Traffic is encrypted with HTTPS. Database access is restricted so that each account can read only its own data, passwords are never stored in readable form, and preview tokens and network identifiers are stored only as one-way hashes. The scanner reads only public web pages and refuses private and internal network addresses. No system is perfectly secure, but we work to protect your information and to keep what we hold to the minimum the service needs.

You can view and export your reports from your account, and delete a business — with all of its scans — from its settings. To access, correct or delete your personal information, delete your account, or object to how we use it, email info@presencescope.com. We will respond within one month. Depending on where you live, you may also have the right to complain to your local data protection authority.

The service is meant for businesses and is not directed at children. Do not create an account if you are under 16.

If we change this policy we will publish the new version here and update the effective date above.

Questions or requests about privacy: info@presencescope.com.