Privacy Policy

Who we are

PrivaChek is a free GDPR compliance scanner operated by Daniel Popa. Our website is at privachek.org. You can contact us at privacy@privachek.org.

What data we collect

We collect minimal data to operate the service:

• URLs you scan — we process the URL you submit to perform the scan. We do not store these permanently.
• Email address — only if you choose to submit it to receive your report. We do not share this with third parties.
• Server logs — standard server logs including IP addresses, collected automatically by our hosting provider (Vercel). These are retained for up to 30 days.

How we use your data

• To perform the GDPR compliance scan you requested
• To email you your scan report if you requested it
• To improve the service based on usage patterns

Legal basis for processing

We process your data on the basis of legitimate interest (operating the service) and consent (where you provide your email address).

Data retention

We do not store scan results permanently. Email addresses submitted for reports are retained for up to 12 months. Server logs are retained for up to 30 days.

Your rights

Under GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (right to erasure)
• Object to processing of your data
• Data portability

To exercise any of these rights, email us at privacy@privachek.org. We will respond within 30 days.

Third party services

We use the following third party services:

• Vercel — hosting provider (US-based). Data may be transferred outside the EU under standard contractual clauses.
• Anthropic — AI analysis provider (US-based). Scan data is sent to Anthropic's API for analysis. Data may be transferred outside the EU under standard contractual clauses.

Cookies

PrivaChek uses only essential cookies required for the service to function. We do not use tracking or advertising cookies.

Contact

For any privacy-related questions, contact us at privacy@privachek.org.