Last updated: August 31, 2026
This Privacy Policy explains how CompScan collects, uses, and protects personal data when you use compscan.io ("the Service"). The data controller is Haibe Hussein, trading as an enskild firma registered in Sweden under organisationsnummer 620206-0676, with a registered address at Solhems Hagväg 51, 163 56 Spånga, Sweden ("we", "us"). We process personal data in accordance with the EU General Data Protection Regulation (GDPR).
| Data | Why we collect it | Legal basis |
|---|---|---|
| Account email, password (hashed), company name | To create and secure your account, and to contact you about your account | Performance of a contract with you |
| Competitor names/URLs and notification destinations (alert email, Slack webhook, phone number) you enter | To run the monitoring and alerting you've configured | Performance of a contract with you |
| IP address (briefly, for rate-limiting login/signup attempts) | To prevent brute-force login attempts and signup abuse | Legitimate interest (account security) |
| Password-reset tokens | To let you securely reset a forgotten password; each token expires after 60 minutes and is single-use | Performance of a contract with you |
| Analytics cookie and usage data (Google Analytics) — only set if you accept the cookie banner | To understand aggregate website traffic (pages viewed, referring sources) so we can improve the marketing site and blog | Consent |
The only cookies we set are a session cookie required to keep you logged in, and — only if you click "Accept" on the cookie banner shown on your first visit — a Google Analytics cookie used to measure aggregate site traffic. You can decline analytics cookies at any time; declining doesn't affect your ability to use the Service. We don't use advertising cookies or any other tracking cookies.
When you add a competitor, CompScan fetches publicly available content about that company (their website, public news coverage, public review/sentiment sources, and publicly discoverable job listings) and, where AI summarization is enabled, sends excerpts of that public content to Anthropic's API to generate a plain-language summary. We do not send your account's personal data (your email, password, or other users' data) to Anthropic as part of this process — only the public competitor content being summarized.
We use the following processors to run the Service. Each only receives the data needed to perform its function:
Some of these providers process data outside the EU/EEA (for example, in the United States). Where that's the case, we rely on the provider's Standard Contractual Clauses or equivalent safeguard. We do not sell personal data to anyone.
We keep your account and competitor data for as long as your account is active. If you close your account, we delete your competitor data, scan history, and account record within 30 days, except where we're required to retain limited records for legal or accounting purposes.
Under GDPR, you have the right to:
To exercise any of these rights, email support@compscan.io. We'll respond within 30 days.
Passwords are stored as salted hashes, never in plain text. Traffic to the Service is encrypted in transit (HTTPS). Access to production data is limited to the operator of this service.
The Service is not directed at anyone under 16, and we don't knowingly collect data from children.
If we make material changes to this policy, we'll notify account holders by email or via a notice in the Service before the changes take effect.
Haibe Hussein, enskild firma (org.nr 620206-0676), Solhems Hagväg 51, 163 56 Spånga, Sweden. support@compscan.io.