Privacy Policy

ScanMyChat (“we”, “us”) is evidence preparation software provided by a small independent software company. We are responsible for the personal data described in this policy. Contact: privacy@scanmychat.com.

When you import a WhatsApp export, it is read and processed by JavaScript running in your browser tab. The content is held in the tab’s memory only; it is not written to browser storage, and closing or reloading the tab discards it. We do not receive, store or have access to message text, participant names, attachments, file names, the generated reports, or the case details you type into the workspace.

• Purchase data. When you buy a licence, Polar collects your name, email, billing details and payment information as merchant of record. We receive order details (such as your email, product and order status) but never your full card number.
• Licence checks. When you export a paid package, your licence key and the SHA-256 fingerprint of the source file are sent to our licence API, which validates the key with Polar. The fingerprint is stored with Polar as the licence’s activation so the licence remains tied to one file. A fingerprint cannot be reversed into the file or its contents.
• Usage analytics. Google Analytics 4 records page views and anonymous product events (for example “analysis started” or “package generated”), with numbers such as message counts reported only in broad ranges. These events never include chat content, names, file names or fingerprints. Google Analytics also receives technical information such as browser type, approximate location and a cookie identifier; it is configured with IP anonymization.
• Server logs. Our host, Vercel, records standard request data such as IP address, user agent and requested URL to operate and secure the site.
• Messages and newsletter. If you use the contact form or subscribe to the newsletter, the details you submit (such as name, email and message) are stored in Supabase.

• To sell and deliver licences, validate them and handle refunds — necessary to perform our contract with you.
• To run, secure and improve the website and product — our legitimate interests, using the minimum data needed.
• To answer your messages — at your request.
• To send the newsletter — with your consent, which you can withdraw at any time by unsubscribing.
• To meet legal obligations, such as tax and accounting records (handled mainly by Polar).

We do not sell personal data, and we do not use it for advertising.

We use the following providers to process data on our behalf. Each handles data under its own terms and privacy policy.

Polar (polar.sh)

Merchant of record: checkout, payment, tax, invoices, refunds, licence-key issuance and validation.

Vercel

Website hosting and standard server logs.

Google Analytics 4

Page views and anonymous product events.

Supabase

Database for contact-form messages and newsletter subscriptions.

These providers may process data in the United States and other countries. Where required, transfers rely on appropriate safeguards offered by the provider.

A cookie notice is shown on your first visit. Analytics cookies are only set if you choose “Accept”; if you decline, Google Analytics runs in consent mode without analytics cookies. Our site uses your browser’s localStorage to keep your licence key (so you don’t have to re-enter it) and to remember your cookie-notice choice. Chat content is never stored in the browser.

You can clear cookies and site data in your browser settings at any time, block analytics cookies, or use Google’s opt-out browser add-on.

• Purchase and licence records, including the licence’s source-file fingerprint, are kept for the life of the licence and as long as needed for tax, accounting and refund purposes.
• Analytics data is kept according to our Google Analytics retention setting.
• Server logs are kept according to Vercel’s log retention.
• Contact messages are kept while needed to handle your enquiry; newsletter data until you unsubscribe.

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, email privacy@scanmychat.com. You may also complain to your local data protection authority.

Because we never receive your chat content, we cannot access, return or delete it — it exists only on your own devices.

Keeping chat content off our servers is our main safeguard. For the data we do handle, we rely on encrypted connections (HTTPS) and the security measures of our providers. The evidence packages you download are files on your device; protecting them is your responsibility. Report security issues to security@scanmychat.com.

ScanMyChat is not directed at children, and we do not knowingly collect personal data from anyone under 16.

We will update this page when our practices change and revise the effective date above. If a change would send chat content off your device or otherwise materially affect you, we will announce it on the site and notify customers by email before it takes effect.

Questions about privacy: privacy@scanmychat.com.