Privacy Policy
Last updated: August 15, 2026
FirewallScan.io (“we”) provides external visibility checks for websites and IP addresses you submit. This policy explains what we collect and why. We process personal data as a controller for account, billing, and service operation.
What we collect
- Account details: name, email address, and password hash
- Workspace membership and invitation emails
- Scan targets you submit (websites and IP addresses) and scan results
- Billing data processed by Stripe (we do not store full card numbers)
- Technical logs such as IP address for rate limiting and abuse prevention
How we use it
We use this data to run scans, send verification and change-alert emails, bill subscriptions, prevent abuse, and operate the service. We do not sell personal data.
Legal bases (EEA/UK)
Contract (providing the service you request), legitimate interests (security, abuse prevention, service improvement), and legal obligation (tax and accounting records).
Sharing
We share data with processors who help us run the product: hosting, email delivery (Resend), payments (Stripe), and error monitoring. Stripe handles payment details under its own terms.
Retention
Account and scan history are kept while your workspace exists. You can delete your account and workspace from settings. Billing records may be kept as required by law. Anonymous free-scan tokens expire.
Your rights
You may request access, correction, deletion, or export of your personal data, and you may object to or restrict certain processing. Contact privacy@firewallscan.io. You may also lodge a complaint with your local supervisory authority.
Contact
Privacy questions: privacy@firewallscan.io