Privacy policy

This draft describes topics that need review before publication. It is not final legal advice or a complete privacy notice.

Data collected

TODO: specify account data, device and session identifiers, usage data, and content users submit to FunnelScope.

Google Analytics with consent

Google Analytics remains off unless you allow analytics through the consent banner. TODO: document the measurement data, providers, and retention settings used in production.

Google sign-in

Google sign-in is used to authenticate FunnelScope accounts. TODO: confirm which Google profile fields are received and how they are used.

Scanned site data

FunnelScope stores the submitted URL, normalized domain, scan status, discovered flows, reports, tasks, and screenshots for accepted scans. This includes free discoveries started before sign-in; anonymous scans are associated with a device ID and can later be linked to an account. Model, token usage, and estimated AI cost are recorded per scan. Administrators can review scan URLs, account or anonymous status, and AI cost. The admin list omits URL query strings and fragments. Retention periods and deletion procedures still need to be finalized.

Retention

TODO: publish retention periods and explain how users can request deletion of account and scan data.

Contact

TODO: add the privacy contact email and the responsible legal entity before launch.

Questions? Visit Contact.