Privacy Policy
Last updated: 2026-10-20
What we collect and why
Your email and name, to sign you in and to reach you. The apps, runs, and findings you create, to show your reports and history. Short evidence snippets captured from the pages you scan, so a finding can be checked and fixed. Payment details are handled by our payment processor, we never store card numbers. We do not store full page contents.
Scans
When you scan a URL, Dots fetch the public page server-side, extract signals, and store only the findings and short evidence snippets. We do not log in or submit data to the target.
How long we keep it
Account details and your apps are kept while your account is open. Scan runs and findings stay with your account, with up to 90 days of run history on paid plans. Deleting an app, a run, or your whole account takes effect immediately, and encrypted backups are purged within 30 days. Payment records are kept by our payment processor for as long as tax law requires.
Deleting your account and data
You can delete your account yourself: Settings, then the Account tab, then Delete my account. That removes your apps, runs, findings, schedules, notifications, delivery integrations and support messages, and cancels any active subscription. To request deletion by email instead, use the Contact page with the Privacy topic. Verified requests are actioned within 30 days.
Sharing
We do not sell your data. We share report links only when you create a shareable link. We use third-party providers for infrastructure and payments under their own terms.
Cookies and consent
We use a consent banner for analytics. We load analytics only after you consent. You can decline without losing functionality.
Security
Scans are read-only. We block private and internal addresses. Your data is visible only to you and admins of your account. Secrets are encrypted at rest.
Your rights (GDPR / CCPA)
You can request access to, export, correct, or delete your data. Use the Contact page or the Export and Delete options in Settings.
Contact
Reach us through the Contact page for any privacy question. Placeholder company name and address — replace before launch.
Placeholder company name and address — replace before launch. This policy should be reviewed by a lawyer before launch.