We collect the following types of information:

• Account information (name, email address, password)
• Card images and collection data you upload
• Usage data (pages visited, features used, timestamps)
• Device and browser information
• Payment and billing information (processed securely by our payment providers)

We use collected information to:

• Provide and maintain the Platform
• Process card analysis and generate reports
• Manage your account and subscription
• Communicate with you about your account and updates
• Improve our services and develop new features
• Detect and prevent fraud or abuse

We do not sell your personal information. We may share data with:

• Payment processors (e.g., Stripe) to handle transactions
• AI and cloud service providers that power our analysis tools
• Legal authorities when required by law or court order
• Business partners with your consent

Third-party providers are obligated to handle your data in accordance with applicable privacy laws.

We implement reasonable technical and organizational measures to protect your data, including encryption, access controls, and secure infrastructure. However, no method of transmission or storage is fully secure, and we cannot guarantee absolute security.

Storage-specific safeguards include:

• Row-level security on every collection record — only your account can access your cards
• Server-side file validation restricting uploads to JPG, PNG, WebP, and PDF (max 10 MB)
• Automatic photo compression (max 1200px, ~150 KB) before storage
• Encrypted connections for data in transit and at rest
• Cloud vault backed by Amazon S3 — the same enterprise standard trusted by banks and healthcare
• Optional local Vault Sync downloads cards as self-contained HTML reports to your computer — your data, your drive, your control

Full details are available on our Storage & Security and Vault & Storage pages.

We retain your data only as long as necessary to:

• Provide our services
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

Retention windows:

• Deleted cards enter a 30-day soft-delete recovery window — they are hidden from your view but fully recoverable during this period, then permanently purged
• Scan history entries are automatically removed after 180 days
• An automated cleanup process runs nightly to enforce these retention windows

You may request deletion of your account and associated data at any time.

Depending on your jurisdiction, you may have the right to:

• Access the data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Opt out of marketing communications
• Restrict or object to certain processing

To exercise these rights, contact us using the information in Section 8.

SCADapp is not intended for individuals under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us for removal.

We may update this Privacy Policy from time to time. Material changes will be communicated through the Platform or via email. Your continued use of SCADapp after changes take effect constitutes acceptance of the revised policy.

SCADapp

Email: support@scadapp.ai