Effective Date: May 20, 2026
At ShadowGuard ("we", "us", or "our"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website and AI scanning tools.
We comply with the General Data Protection Regulation (GDPR) for users residing in the European Economic Area (EEA).
1. Information We Collect
- Account Information: When you register, we collect your email address and authentication data via Supabase Auth.
- Payment Data: We do not collect or store credit card details. All billing information and transactions are handled entirely by our payment partner, Paddle, in accordance with their privacy standards.
- Video Content Data: To protect your privacy and reduce server load, we use local browser processing (HTML5 Canvas) to extract frames. Only compressed, temporary image frames are securely proxied to our AI backend for analysis. We never store your original video files or analyzed frames on our servers. They are discarded immediately after the scan results are generated.
2. How We Use Your Information
We use the collected data solely to:
- Provide, maintain, and secure your ShadowGuard account.
- Process your credit balance and track your scan history in your dashboard.
- Respond to your support inquiries and process legitimate refund requests.
3. Data Retention
- Your account data (email, scan history logs, and credit balance) is stored securely via Supabase as long as your account exists.
- If you decide to delete your account using the "Delete Account" button in your dashboard, all your personal data, logs, and credit balances will be permanently and irreversibly wiped from our database in compliance with GDPR.
4. Third-Party Services
We share data with third-party vendors only to the extent necessary to run the service:
- Supabase: For secure user authentication and database management.
- Paddle: Our Merchant of Record for billing and fraud prevention.
- AI Processing Vendors: Temporary frame analysis (no data is stored by vendors for training purposes).
5. Your GDPR Rights (For EEA Users)
Under the GDPR, you have the following rights:
- The Right to Access: You can check your account data and history at any time via your dashboard.
- The Right to Erasure ("Right to be Forgotten"): You can instantly delete your entire profile and data via the account settings.
- The Right to Data Portability: You may request a copy of your personal data by contacting support.
6. Cookies
We use essential cookies strictly to keep you logged into your account session (via Supabase). We do not use intrusive tracking or advertising cookies without your explicit consent.
7. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by updating the "Effective Date" at the top of this page.
8. Contact Us
For any privacy-related inquiries or to exercise your data rights, please contact our support at: support@getshadowguard.com.