1. Scope and operator
This Privacy Policy applies to The Signal Scan website, assessment, crawler, results, and report-request features (collectively, the “Service”). The Service is operated by Chaz Stead (“I,” “me,” or “my”).
This policy covers information handled through the Service. It does not govern a website you ask the Service to scan or other third-party websites linked from a result.
2. Information collected
Scan and assessment information
When you start a scan, the Service collects the public website URL you submit, required industry and marketing-goal selections, your confirmation that public pages may be reviewed, and any optional company name or role you provide. It also stores your assessment answers and the scores, findings, recommendations, and confidence measures generated from them.
Public website information
The Service may retrieve and store public page URLs, page titles, metadata, extracted readable text, headings, links, image descriptions, and short evidence excerpts from a limited number of public pages on the submitted domain. It does not sign in, submit forms, request credentials, or intentionally access private pages. Public pages can sometimes contain personal information posted by the site owner; that information may appear in extracted text or a result.
Report and marketing information
If you request the complete report, the Service collects your first name, work email address, optional company name, and whether you separately chose to receive occasional marketing emails. Requesting a report does not itself enroll you in marketing.
Technical and security information
The hosting provider may process an IP address, browser or device details, requested pages, timestamps, and security or diagnostic logs to deliver and protect the Service. The application converts the requester IP address into a one-way hash for rate limiting and does not store the raw IP address in its scan database.
The Service does not currently use advertising cookies, third-party behavioral tracking, or a configured analytics service. Essential hosting or security technologies may still be used to operate the site.
3. How information is used
Information is used to:
- create and operate a scan and team assessment;
- retrieve and analyze public website content;
- calculate scores, evidence, findings, recommendations, and reports;
- deliver or unlock a report requested by you;
- send marketing only when you make the separate optional choice;
- limit abusive or excessive scan activity and protect the Service;
- diagnose errors and maintain reliability; and
- comply with law and protect legal rights.
Where applicable law requires a legal basis, processing is based on your request to use the Service, legitimate interests in operating and securing it, your consent for optional marketing, or compliance with legal obligations.
5. Scan results and public websites
Each scan uses a unique, difficult-to-guess results address. Results are not listed in a public directory, but they are not protected by a password. Anyone who receives or discovers the results link may be able to view the scan. Do not submit confidential information in form fields, and share the results link only with people you trust.
A public website owner or an authorized representative may ask me to review or remove stored content derived from that website. Include the website domain and, if available, the results link with the request.
6. Retention and security
Scan sessions, assessment responses, crawled-page content, findings, and related report-request records are scheduled for deletion after 90 days under the current Service configuration. A shorter or longer period may apply if reasonably necessary to address security, resolve a request, preserve a consent or suppression record, meet a legal obligation, or establish or defend legal claims.
Marketing contact information is retained until you withdraw consent or it is no longer needed, subject to any suppression record needed to honor an opt-out.
Reasonable administrative and technical measures are used to protect information, including same-origin checks, input validation, one-way requester hashing, rate limits, restricted crawler destinations, and managed hosting controls. No online system can guarantee absolute security.
7. Your choices and privacy rights
You may ask to access, correct, or delete personal information associated with you; request a copy; object to or restrict certain processing; or withdraw consent. Rights vary by location, and identity or authority may need to be verified before a request is completed.
You may withdraw marketing consent at any time using the unsubscribe option in an email or by contacting me. Opting out of marketing does not affect a requested report or other non-marketing messages.
Because the Service does not sell personal information, share it for cross-context behavioral advertising, or track visitors across unrelated websites, it does not offer a separate sale, targeted-advertising, or “Do Not Track” opt-out.
8. Other important details
Children
The Service is intended for business users and is not directed to children under 13. I do not knowingly collect personal information from children. If you believe a child has provided information, contact me so it can be deleted.
International use
Information may be processed in the United States and other locations where service providers operate. Where required, appropriate safeguards will be used for cross-border transfers.
Policy updates
This policy may change when the Service, providers, or applicable law changes. The updated policy will be posted here with a revised date and any additional notice required by law.
9. Contact
Privacy questions and requests can be sent to chaz@chazstead.com.
You can also review the Terms of Use.