Privacy Policy

1. Introduction

JSVisible ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SEO scanning service at jsvisible.com (the "Service").

2. Data Controller

For the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws, the data controller responsible for your personal data is:

3. Information We Collect

3.1 Information You Provide

• Account Information: Email address, name, and password when you create an account
• Payment Information: Billing details processed securely through Stripe (we do not store credit card numbers)
• Website URLs: URLs you submit for scanning and analysis
• Team Information: Team names, member emails, and roles when using collaboration features
• Communication Data: Messages you send through our contact forms or support channels

3.2 Information Collected Automatically

• Usage Data: Scan history, feature usage, and interaction patterns
• Device Information: Browser type, operating system, IP address
• Cookies: Session cookies for authentication and preference storage
• Log Data: Access times, pages viewed, and technical errors

3.3 Scanned Website Data

When you scan a website, we temporarily access and analyze:

• Page HTML content
• Meta tags and SEO elements
• JavaScript execution results
• Page load performance metrics

This data is processed solely for analysis purposes and stored in aggregated form as scan results.

4. Legal Basis for Processing (GDPR)

Under the GDPR, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide our Service to you
• Legitimate Interests: Improving our Service, preventing fraud, ensuring security
• Legal Obligations: Compliance with applicable laws and regulations
• Consent: For marketing communications (you can withdraw consent at any time)

5. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process your scans and generate SEO reports
• Manage your account and subscription
• Process payments and prevent fraud
• Send service-related notifications (scan results, quota alerts, etc.)
• Respond to your support requests and inquiries
• Monitor usage patterns to improve our Service
• Detect and prevent technical issues or security threats
• Comply with legal obligations
• Send marketing communications (only with your consent, opt-out available)

6. How We Share Your Information

We do not sell your personal information. We may share your information with:

6.1 Service Providers

• Supabase: Database and authentication services (EU data processing)
• Stripe: Payment processing (PCI-DSS compliant)
• Resend: Email delivery service
• Railway: Hosting infrastructure

These providers are contractually obligated to protect your data and use it only for providing services to us. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place.

6.2 Team Members

If you're part of a team, your scan results and team activity may be visible to other team members based on your team's settings.

6.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change.

7. International Data Transfers

JSVisible is based in Spain, within the European Union. Your information may be transferred to and processed in countries other than your own. When we transfer data outside the EEA, we ensure appropriate safeguards are in place, including:

• EU Standard Contractual Clauses
• Adequacy decisions by the European Commission
• Binding Corporate Rules where applicable

8. Data Retention

We retain your information for as long as necessary to provide the Service and comply with legal obligations:

• Account Data: Retained while your account is active
• Scan Results: Stored according to your subscription plan (Free users: 30 days, Pro/Enterprise: indefinitely)
• Payment Records: Retained for 7 years for tax and accounting purposes
• Usage Logs: Typically retained for 90 days

When you delete your account, we delete or anonymize your personal information within 30 days, except where retention is required by law.

Abuse Prevention: To prevent abuse of our service, we retain a record of your email address and aggregate usage history (such as total scans used and trial eligibility) after account deletion. If you create a new account with the same email address, your previous usage and trial status may be restored. This data is retained indefinitely for abuse prevention purposes but does not include your scan results, personal content, or other identifiable information.

9. Your Privacy Rights

Depending on your location, you may have the following rights:

9.1 Access and Portability

You can access your account data and scan history through your dashboard. You may request a copy of your data in machine-readable format.

9.2 Correction

You can update your account information in your settings page.

9.3 Deletion

You can delete your account at any time. Contact us at privacy@jsvisible.com if you need assistance.

9.4 Opt-Out

You can unsubscribe from marketing emails using the link in any email or through your notification settings.

9.5 Object to Processing

You may object to certain data processing activities. However, this may limit your ability to use the Service.

To exercise these rights, contact us at privacy@jsvisible.com. We will respond to your request within 30 days.

10. Cookies and Tracking

We use cookies and similar technologies for:

• Essential Cookies: Required for authentication and basic functionality
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how you use the Service

You can control cookies through your browser settings, but disabling essential cookies may affect Service functionality.

11. Data Security

We implement industry-standard security measures to protect your information:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Secure password hashing (bcrypt)
• Regular security audits and updates
• Access controls and authentication
• Secure payment processing through PCI-compliant providers

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

12. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

13. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

14. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right not to be subject to automated decision-making
• Right to lodge a complaint with a supervisory authority

If you are located in Spain, you may file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos - AEPD) at www.aepd.es.

15. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell data)
• Right to deletion
• Right to non-discrimination for exercising your rights

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on the Service. Your continued use of the Service after changes constitutes acceptance of the updated policy.

17. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: