Privacy policy

Who is responsible for your data

What we collect

• Your email address, so we can send your report link, sign-in codes, receipts and, if you subscribe, your monthly check results.
• If you subscribe to Stay Approved: the website we watch for you, the results of each monthly check, and your subscription status from Stripe.
• The website address you scan, your selected suspension reason and any ad text you paste.
• The public content of the scanned pages, used to produce your report.
• Your IP address, used to prevent abuse of free scans.
• Anonymous visit statistics: the pages you view, the site you came from, your device type and browser, and your approximate country (from your device's time zone). These are counted without cookies, we don't store your IP address for them, and we can't recognise you from one day to the next. If your browser sends "Do Not Track", we don't count you at all.
• Payment details are handled by Stripe; we receive confirmation of payment but not your card number.

How we use it

To run scans, deliver reports, process payments, prevent abuse and answer support requests. Page text may be processed by our analysis provider to generate findings, suggested wording and policy drafts. We don't sell your data.

Service providers

We use these companies to run the service. They only use your data to provide their service to us.

• Render: hosting and database.
• Stripe: payments and subscriptions.
• Anthropic: analysis of the public text on scanned pages, and drafting suggested wording and policies.
• Firecrawl: fetching the pages of the website you scan.
• Google: page speed and safe-browsing checks on the website address you scan, and the fonts used on this site.
• Our email provider: sending report links, sign-in codes and check results.

Some of these providers are based outside the British Isles, including in the United States. Where that happens, they protect your data with standard contractual safeguards.

How long we keep it

• Reports, the page content behind them, and the IP address used are deleted 12 months after the scan, unless the website is being watched on an active Stay Approved plan (then we keep its history while the plan is active).
• Anonymous visit statistics are deleted after about 13 months.
• Your email address and payment records are kept for as long as we need them for accounting and tax law.
• You can ask us to delete your data sooner at any time.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it, by emailing support@certanza.app. You can also complain to the Isle of Man Information Commissioner, or the data protection regulator where you live.

Cookies

We don't use advertising or tracking cookies. See our cookie policy.