Privacy Policy

Last updated: June 2026

1. What we collect

ClearScan collects your email address and name when you create an account, and the domain names you add for scanning. We also collect standard web server logs (IP address, user agent, request timestamps) for security and reliability purposes.

Scan results contain only publicly available information about your domain — DNS records, HTTP headers, certificate data, and information from public breach databases. We never access your internal systems, credentials, or any sensitive customer data.

2. How we use your data

To run external security scans on domains you add
To send you alerts and digest emails you have opted in to
To process payments via Stripe (we never store card numbers)
To improve the product and diagnose technical issues

We do not sell your personal information to third parties. We do not use your data for advertising purposes.

3. Data storage and security

Your data is stored in Supabase (hosted on AWS) in the United States. All data is encrypted in transit (TLS) and at rest. Access to production data is restricted to authorized personnel.

4. Third-party services

ClearScan uses the following third-party services:

Supabase — database and authentication
Stripe — payment processing
Resend — transactional email delivery
Anthropic — AI-powered report summaries (paid tiers)
HaveIBeenPwned — breach data lookups
Google Web Risk — unsafe-site listing lookups
OSV.dev — public vulnerability database lookups by software version
CISA KEV — the U.S. government catalog of vulnerabilities known to be actively exploited
FIRST EPSS — public exploit-likelihood scores, used only to order findings

TLS certificates are checked by ClearScan directly — we open one connection to your site and read the certificate it serves. No third party is involved in that check.

5. Your rights

You may request deletion of your account and all associated data at any time by emailing hello@getclearscan.app. We will process your request within 30 days.

6. Contact

Questions about this policy? Email hello@getclearscan.app.