Privacy Policy

PageScan ("we", "us", "our") is an AI-powered website proofreading service operated by Dominic Wordsworth, trading as PageScan, based in the United Kingdom. Our service is available at pagescan.io.

You can contact us at: hello@pagescan.io

We collect and process the following categories of personal data:

Account data — your name, email address, and hashed password when you register. If you sign in via Google OAuth, we receive your name and email from Google.

Organisation data — the name of your organisation and the website domains you add to PageScan.

Scan data — URLs and text content extracted from your website pages during a scan. This content is passed to Anthropic's Claude API for analysis and is not stored permanently on our systems beyond the scan result.

Usage data — scan history, results, error counts, and plan usage metrics.

Sign-up source — when you create an account, with your email address or with Google, we record how you reached PageScan: the website that referred you (for example google.com or linkedin.com), any campaign tags on the link, and the first PageScan page you landed on. This is sent with your sign-up and is not stored in cookies. We use it to understand which channels bring us customers (legitimate interests).

Billing data — your subscription plan and billing status. Payment details (card numbers etc.) are handled exclusively by Stripe and are never stored by PageScan.

Communications — any feedback you submit via our in-app feedback widget.

Marketing preference — whether you have asked for tips and news by email, how and when you chose, and the wording you agreed to. You choose when you sign up (the box is unticked unless you tick it) and can change it at any time on your Account page.

We use your data to:

— Provide, operate, and improve the PageScan service

— Process your website scans and return results

— Manage your account and subscription

— Send transactional emails (scan complete notifications, billing receipts)

— Send tips and news by email, only if you have opted in. Every such email has an unsubscribe link, and you can opt out on your Account page

— Respond to feedback and support requests

— Monitor service performance and diagnose technical issues

— Comply with legal obligations

We do not use your data for advertising, and we do not sell your data to third parties.

PageScan uses Anthropic's Claude API to analyse the text content of your website pages. When you run a scan, page text extracted from your site is sent to Anthropic for processing.

Anthropic processes this data under their own privacy policy and terms of service. We recommend reviewing Anthropic's privacy policy at anthropic.com/privacy if you have questions about how your content is handled during AI processing.

We do not send personal data about you or your users to Anthropic — only the public-facing text content of the web pages you choose to scan.

Under UK GDPR and EU GDPR, we rely on the following legal bases:

Contract performance — processing your account data and running scans is necessary to deliver the service you've signed up for.

Legitimate interests — service improvement, where our interests are not overridden by your rights.

Consent — Google Analytics runs only if you accept analytics cookies. You can withdraw consent at any time from the Cookie settings link at the foot of our home page.

Legal obligation — where we are required by law to retain certain records.

Consent — tips and news emails are sent only with your consent, which you can withdraw at any time on your Account page or with the unsubscribe link in any such email.

We share data only with the following third-party processors, under appropriate data processing agreements:

Supabase (supabase.com) — database and authentication infrastructure, hosted in the EU.

Anthropic (anthropic.com) — AI text analysis via the Claude API.

Stripe (stripe.com) — payment processing and subscription management.

Railway (railway.app) — crawler service hosting.

Vercel (vercel.com) — frontend hosting.

Google Fonts (fonts.google.com) — web fonts. Receives your IP address and browser details when a page loads.

icon.horse and Google favicon service — site icons. These receive the domain names you add to PageScan, so that we can display each site's icon.

Google Analytics (Google Ireland Ltd / Google LLC) — website analytics, only if you accept analytics cookies. Receives the pages you visit on pagescan.io, the site that referred you, and your browser and device details. Data may be processed in the United States under Google's data transfer safeguards.

Cloudflare cdnjs (cdnjs.cloudflare.com) — PDF generation library, loaded when you export a report. Receives your IP address and browser details.

Apollo.io (apollo.io) — sends some of our emails from hello@pagescan.io, including one-off service messages to account holders. Receives your name, your email address and the message we send you.

We do not share your data with any other third parties unless required by law.

We retain your account data for as long as your account is active. Scan results are retained for as long as your account is active. You can delete a site and its scan history at any time from your dashboard, and deleting your account removes them.

If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law (e.g. financial records for 7 years under UK tax law).

Under UK and EU data protection law, you have the right to:

— Access the personal data we hold about you

— Correct inaccurate data

— Request deletion of your data ("right to be forgotten")

— Object to or restrict certain processing

— Data portability — receive your data in a machine-readable format

— Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at hello@pagescan.io. We will respond within 30 days.

If you are unsatisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

Essential storage. PageScan uses your browser's storage to keep you signed in and to remember your preferences. These are needed for the service to work and do not need your consent.

Analytics cookies (optional). If you click "Accept analytics", we use Google Analytics to see how visitors find and use PageScan: which pages are visited and which site referred you. It sets the cookies _ga and _ga_<id>, which last up to 2 years. They are off unless you accept them, and nothing is sent to Google until you do. Web addresses are trimmed before they are sent, so sign-in links and the domains you scan are never passed to Google. Google signals and ad personalisation are switched off.

Changing your mind. Use the Cookie settings link at the foot of our home page at any time. Rejecting removes the analytics cookies.

We do not use advertising cookies or tracking pixels.

We implement appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), hashed password storage, and row-level security on our database.

No internet transmission is completely secure. While we take reasonable precautions, we cannot guarantee absolute security.

PageScan is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe we have done so, please contact us and we will delete the data promptly.

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email or via an in-app notice. The "last updated" date at the top of this page will always reflect the most recent revision.

We sometimes email people at UK companies to show them spelling mistakes we have found on their company's public website. This section explains what we hold about those people and why.

What we hold: your name, work email address, job title, company name and company website, and the spelling findings from a check of that public website.

Where it comes from: the business contact database Apollo.io, your company's own website, and Companies House. Each email says which source we used for your address.

Why we use it: our legitimate interest in telling a business about mistakes on its own website, and in offering a service that finds them. We only email limited companies, LLPs and plcs, and only at a work address. We have weighed this against your interests and rights, and we keep a record of that assessment.

Who sees it: nobody outside PageScan. The details are kept by PageScan, not in the PageScan app. Apollo.io holds its own copy under its own privacy policy. The website text we check is sent to Anthropic for analysis, as described in section 4.

How long we keep it: up to 6 months from the first email, unless you reply or create an account. If you ask us not to contact you, we keep your email address and company domain on a do-not-contact list, only so that we never email you again.

Your rights: you can object at any time by replying to any of our emails, or by writing to hello@pagescan.io, and we will stop straight away. You also have the rights listed in section 8.

If you have any questions about this Privacy Policy or how we handle your data:

Email: hello@pagescan.io

Website: pagescan.io