Privacy Notice

This Privacy Notice describes how David Castor ("we", "us") collects, uses, and shares personal data when you use EdgeScan (the "Service"). We act as the data controller for information we collect.

1. Data We Collect

• Account data: email address, login credentials.
• Usage data: features used, queries submitted, page views, device and browser identifiers, IP address.
• Support data: messages you send us.
• Access-request data: the optional message you provide when requesting access, and the timestamp/outcome of that request.

EdgeScan is invite-only and free. We do not collect payment information, billing addresses, or card details.

2. How We Use Data

• To create and operate your account (legal basis: contract).
• To provide the Service and AI-generated outputs (contract).
• To prevent fraud and abuse and to keep the Service secure (legitimate interests).
• To improve product features and reliability (legitimate interests).
• To respond to support requests (contract / legitimate interests).
• To meet legal obligations (legal obligation).

3. Data Sharing

We share personal data with:

• Service providers / subprocessors who help us run the Service (hosting, database, transactional email, AI providers).
• Professional advisers (legal, accounting) where appropriate.
• Authorities when required by law.

4. Data Retention

We retain account and usage data while your account is active and for a reasonable period afterwards to meet legal, tax, and security obligations. After that, data is deleted or anonymised.

5. Your Rights

Depending on your location you may have rights to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent. To exercise any right, contact us through the Service. UK/EEA users have GDPR rights including the right to lodge a complaint with their supervisory authority; we will respond within one month.

6. International Transfers

Your data may be processed in countries outside your own. Where required, we use appropriate safeguards (such as Standard Contractual Clauses or adequacy decisions).

7. Security

We use appropriate technical and organisational measures (encryption in transit, access controls, hardened infrastructure) to protect your data. No system is perfectly secure, so we cannot guarantee absolute security.

8. Cookies

We use essential cookies and local storage to keep you signed in and to operate the Service. We may use limited analytics cookies to understand usage. You can manage cookies through your browser settings.

9. Contact

Questions about this Privacy Notice? Contact David Castor through the Service.