Privacy Policy
Last updated: 2026
WebScan Pro ("we", "us", "the Service") is an independently operated product. We respect your privacy and keep the data we handle to the minimum needed to run the Service. This policy explains what we collect and how we use it.
The short version
Your security scans run entirely on your own device. We never receive your scan targets, requests, payloads, credentials or results. Our servers only handle your account and subscription.
Information we collect
- Account data: your email address and a securely hashed password (using Argon2). Optional profile fields you provide.
- Subscription data: your plan, subscription status and billing dates. Payment details are processed by Paddle — we do not receive or store your card information.
- Usage counters: the number of scans you run per day, to enforce plan limits. This is a count only — never the scan contents.
- Technical logs: limited server logs (e.g. request times, IP for rate-limiting and abuse prevention). We log header/cookie names only where relevant, never values or secrets.
Information we do NOT collect
- Scan target URLs, requests, responses, payloads or findings.
- Authentication tokens or cookies you enter for authenticated scans — these are sent only to your local scanner.
- Payment card details.
How we use information
- To provide and secure the Service (authentication, entitlements, abuse prevention).
- To process subscriptions via Paddle.
- To communicate essential service and account messages.
Third-party services
We rely on a small number of trusted providers to run the Service:
- Paddle — our payment processor and Merchant of Record. Paddle handles payments and applicable taxes and is responsible for your payment data (see Paddle's own privacy policy).
- Hosting & email — a cloud hosting/CDN provider serves the website and account service, and a transactional email provider delivers account emails (such as password resets).
- AI analysis (DeepSeek) — the report's optional AI summary is generated from the finding text you submit. No account identifiers are required for this, and your scan targets and results are never sent to us.
Data retention
We keep account data for as long as your account is active. You may request deletion of your account and associated personal data at any time.
Your rights
Depending on your location, you may have rights to access, correct, export or delete your personal data, and to object to certain processing. To exercise these rights, contact support@webscanpro.app.
Security
We use industry-standard measures including encrypted transport (HTTPS), Argon2 password hashing, short-lived access tokens, brute-force protection and strict server-side validation.
Cookies
Our marketing website uses only essential functionality and does not set advertising or cross-site tracking cookies. The desktop app stores your session locally on your device.
Changes
We may update this policy; material changes will be posted here with a new date.
Contact
Questions? Email support@webscanpro.app.