Privacy Policy

Last updated: October 9, 2026 · Scanpine Web (scanpineweb.com), a product of Cephic LLC

Who we are and what the app does

Scanpine Web (“we”, “us”) is a website search-optimisation service operated by Cephic LLC. You enter the address of a website; we read its public pages, check how it appears in Google search, in maps and directories and in AI answer engines, and give you a scored report with concrete fixes (page titles, descriptions, headings, FAQ answers, structured data). If you choose a paid fix plan and connect your site, we apply the fixes you approve. For local businesses you can also let us update your Google Business Profile, again only with changes you approve.

This policy explains what information we collect, how we use and share it, how long we keep it and how you can delete it.

Information we collect

  • Account information. When you sign in with Google, Apple or Facebook we receive your name, email address, profile picture and the provider’s account ID. We never see or store your password.
  • Websites you submit. The website addresses you enter, the business locations you confirm (street address, ZIP code, phone number, service area), and the public pages we read from those websites.
  • Results we generate. Scores, reports, keyword data, suggested fixes, which fixes you accept or decline, and a log of every change applied to your site (before and after), so it can be undone.
  • Connection credentials. If you connect a site, the WordPress plugin key or Cloudflare API token you provide. These are stored encrypted.
  • Google Business Profile access (only if you choose to connect it; see the next section).
  • Payment information. Payments are handled by Stripe. We receive the payment status, plan and the last four digits and brand of your card; we never receive or store full card numbers.
  • Technical data. Standard server logs (IP address, browser type, time of request) used for security, abuse prevention and debugging.

Google user data

We request access to Google user data in two situations, and only for the purposes described here.

1. Sign in with Google

Scopes: openid, email, profile. We use your name, email address and profile picture only to create and identify your Scanpine Web account, show who is signed in, and send you emails about your account and reports.

2. Google Business Profile connection (optional)

Scope: https://www.googleapis.com/auth/business.manage. Only when you click “Connect Google Business Profile” for one of your websites. We use this access to:

  • list the Business Profile accounts and locations you manage, so you can pick the one that belongs to your website;
  • read that location’s public business information (name, category, address, phone, website, description, opening hours) and compare it with your website to find problems;
  • write the website address, business description and opening hours to that location, only after you review and approve each change in a confirmation dialog. Every change is recorded and can be reverted.

We never change your business name, category or address, never post, reply to reviews or upload photos, and never act on a location you did not select. The access and refresh tokens Google issues are stored encrypted. You can disconnect at any time from your site’s page in Scanpine Web (we then revoke the token with Google and delete it) or at myaccount.google.com/permissions.

How we treat Google user data

  • Scanpine Web’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
  • We use Google user data only to provide and improve the user-facing features described above.
  • We do not sell Google user data, do not use it for advertising, and do not transfer it to data brokers or information resellers.
  • We do not use Google user data to develop, improve or train generalised or non-personalised AI or machine-learning models. Public listing information may be included in the prompt that writes your own report, and is not used to train models.
  • Humans at Scanpine Web do not read Google user data unless you ask us to (for example a support request), it is needed for security or abuse investigation, or the law requires it.

How we use information

  • To sign you in and keep your websites, reports and changes attached to your account.
  • To run the audits you request and generate your report and suggested fixes.
  • To apply, verify and undo the changes you approve through the connection you set up.
  • To process payments, enforce plan limits, prevent abuse and keep the service secure.
  • To send service emails (sign-in, finished reports, receipts, service request updates). We do not send marketing email without your consent.

We do not sell your personal information and we do not use it for advertising.

Who we share information with

We share only what each provider needs to perform its service for us, under contracts that limit its use:

  • AI providers (DeepSeek, Anthropic): public website content and business details, to write your report and fixes.
  • Search data providers (DataForSEO, Firecrawl): website addresses, search terms and business names, to fetch search volume, rankings, listings and page content.
  • Google: the Business Profile and Search Console requests you authorise.
  • Stripe (payments), Postmark (email delivery), BrightLocal (only if you buy a directory listing service) and our hosting provider.
  • Authorities, when required by law or to protect the rights and safety of our users and the service.

Data retention and deletion

We keep your account and its data while your account is open. Server logs are kept for up to 30 days. Disconnecting a Google Business Profile deletes its tokens immediately. To delete your account and all associated data, email [email protected] from the address you signed up with, with the subject “Delete my account”. We delete your data within 30 days and confirm by email. Payment records that the law requires us to keep are retained by Stripe and us only for that purpose. If you signed in with Facebook, removing Scanpine Web under Facebook → Settings → Apps and Websites is treated as a deletion request.

Security

All traffic uses HTTPS. Connection credentials and Google tokens are encrypted at rest. Access to production systems is limited to the people who operate the service.

Cookies and local storage

We use a short-lived cookie during sign-in and when connecting Google, to protect against cross-site request forgery, and your browser’s local storage to keep you signed in and remember your theme. We do not use tracking or advertising cookies.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it, by emailing [email protected]. Residents of California, the EU/EEA and the UK have these rights under their local laws, and we honour them for everyone.

Children

Scanpine Web is a business tool and is not intended for anyone under 16. We do not knowingly collect data from children.

Changes to this policy

We will post any change on this page and update the date above; material changes are also announced by email.

Contact

Cephic LLC · Scanpine Web · [email protected]