Privacy Policy

1. Information we collect

1.1 Account data – your email address, your name (if you give one), and sign-in data: a password hash, or your Google account identifier if you sign in with Google; whether your email is verified.

1.2 Devices and sessions – where a session is open (website or app), browser or device information (user agent), IP address, and the times of sign-in and last use. You can see this data under Devices in your account.

1.3 Tokens and searches – your balance and the history of credits and charges: search mode (Low, Mid or Pro), cost, time, and the text of the search query shown in your history; for Pro, how many minutes of video were checked in the cloud.

1.4 Video and audio – your footage, its index and your search results are stored and processed on your computer; we do not receive them. The exception is Pro mode: short fragments of what was found (frames and, for speech search, audio) are sent to a cloud AI for checking and are not stored (Section 5). We do not perform facial recognition or biometric identification of people in your footage.

1.5 Payment data – billing name, address and payment method details are collected and processed by the payment service: Dodo Payments as our Merchant of Record or, for ruble payments, Robokassa. We only receive order details: the product, amount, status and number of tokens. We never see or store your full card number.

1.6 Automatic plan renewal – to charge later periods, the payment service keeps a reference to your payment method. We keep the payment service's identifiers of your subscription and customer record, the renewal's state (renewing, cancelled, switched to another plan), the history of charges, and a record of your agreement to automatic renewal: the order and the time.

1.7 Support – your messages to support.

1.8 Technical data – IP address, browser, and the time and address of requests in server logs; used for security, abuse prevention and debugging. Our server also looks up your country from your IP address (in the DB-IP database, with no call to third parties and nothing stored) to offer only the sign-in options allowed in your country.

1.9 Site analytics – only with your consent – which pages were opened, where you came from, device and browser type, approximate location from the IP address, and the identifiers in Yandex Metrica and Google Analytics cookies. This applies to rescanzo.com only.

1.10 We do not ask for passport details, documents, photos or any other information about you beyond what the Service needs to work.

2. How we use your information

2.1 To provide the Service: run your account, sign you in on the website and in the app, count and charge tokens, and check results in Pro mode.

2.2 To take payments and credit the tokens you buy, via Dodo Payments or, for ruble payments, via Robokassa; for plans, to charge renewals, carry out cancellations and plan switches, and email you about them (for example, a failed renewal charge or a new price).

2.3 To send service emails: verification codes, password resets, security notices and notices of changes to our terms.

2.4 To answer support requests.

2.5 To improve search quality and speed using aggregated statistics (for example, how many searches run in each mode).

2.6 With your consent, to understand visits to the website and improve it, using Yandex Metrica and Google Analytics.

2.7 To detect and prevent fraud, abuse and security incidents.

2.8 To comply with the law and lawful requests from public authorities.

2.9 Legal bases under the GDPR and the law of the Republic of Moldova: performance of our contract with you (the Terms of Use), our legitimate interests (security, improving the Service), your consent (analytics cookies), and compliance with legal obligations.

We do not sell, rent or trade your personal data to third parties for their marketing, we do not send marketing emails without your consent, and we do not use your footage or fragments to train models.

3. How we share information

Only with the providers the Service cannot run without, and only as much as they need:

3.1 Dodo Payments (dodopayments.com) – payment processing, invoicing, tax and payment support as Merchant of Record. Dodo Payments acts as an independent controller of the payment data it collects from you; see its Privacy Policy.

3.2 Robokassa (OOO Robokassa, robokassa.com) – takes ruble payments on behalf of the seller named in the Public Offer. You enter your card details on Robokassa's page; Robokassa acts as an independent controller of the payment data it collects from you; see its privacy policy (in Russian).

3.3 netcup (netcup.de) – our server (VPS) in Germany, which runs the website, the database and the Service's backend.

3.4 Google (google.com) – sign-in with Google, if you choose it: we receive your email address, name and account identifier from Google. With your consent, also Google Analytics: website visit statistics, with advertising features off.

3.5 Cloud AI provider – checks fragments found in Pro mode. Fragments are sent only for the duration of the check and are not stored.

3.6 Email delivery provider – delivers service emails (codes, password resets, notices).

3.7 Yandex (yandex.ru) – Yandex Metrica, only with your consent: website visit statistics, without session recording (Webvisor).

3.8 Public authorities – only where the law requires it.

3.9 Anyone else – only with your consent.

Providers process data on our instructions under data processing agreements, except Dodo Payments and Robokassa, which act as independent controllers.

4. Cookies

4.1 Necessary – two secure (httpOnly) session cookies that keep you signed in; a signed-in flag that lets the website show the link to your account; and a cookie that stores your choice in the banner (kept for 6 months). These need no consent.

4.2 Analytics – Yandex Metrica cookies (_ym_*, up to 1 year) and Google Analytics cookies (_ga, _ga_*, up to 2 years). They are set only after you click "Accept all" or turn analytics on in the settings; until then, no analytics script is loaded.

4.3 We use no advertising cookies, tracking pixels or session recording.

4.4 You can change your choice or withdraw consent at any time in the cookie settings. When you withdraw it, we delete the analytics cookies from your device.

4.5 The app keeps session data on your device so you do not have to sign in on every launch.

4.6 You can also disable cookies in your browser, but you will not be able to sign in to your account without the necessary ones.

5. Data retention

5.1 Footage – your source files, index and search results are not stored on our servers: they stay on your computer.

5.2 Pro fragments – deleted right after the check, and kept neither by us nor by the cloud AI provider for any other purpose.

5.3 Account, transaction history and search queries – kept for as long as the account exists.

5.4 Orders – the product, amount, status and the Dodo Payments or Robokassa payment number, and the record of your agreement to automatic renewal, are kept for accounting, to prevent double credits and to resolve payment disputes, for as long as the account exists and longer where the law requires it.

5.5 Sessions and server logs – up to 12 months; you can end open sessions under Devices at any time.

5.6 Analytics data – kept by Yandex and Google for the periods set in those services (no more than 14 months in Google Analytics).

5.7 Account deletion – personal data is deleted within 30 days, except data we must keep by law; billing records are kept by Dodo Payments and Robokassa under their own obligations. When the account is deleted, tokens on your balance are forfeited and a plan's automatic renewal is cancelled (see the Terms of Use).

6. Your rights

Depending on where you live (including the GDPR for EU residents and Law No. 133 of 08.07.2011 of the Republic of Moldova on personal data protection), you have the right:

6.1 Of access – to get a copy of the data we hold about you.

6.2 To rectification – to correct inaccurate or incomplete data; you can change your name and email in settings.

6.3 To erasure – to delete your account in settings or ask us to delete your data.

6.4 To data portability – to receive your data in a structured, machine-readable format.

6.5 To object and to restriction – to object to processing based on legitimate interests, or ask us to restrict it.

6.6 To withdraw consent – at any time, where processing is based on consent.

6.7 To lodge a complaint with a supervisory authority – in Moldova, the National Center for Personal Data Protection; in the EU, the authority of your country.

To exercise these rights, email support@rescanzo.com. We will respond within 30 calendar days.

7. Data security

7.1 Data in transit is always encrypted (TLS 1.2 or higher).

7.2 Passwords are stored only as hashes; session tokens live in secure cookies, not in browser storage.

7.3 Access to personal data is limited to those who need it to run the Service.

7.4 We review security regularly and fix vulnerabilities we find. No system is completely secure, so we cannot guarantee absolute security.

7.5 If a data breach poses a risk to your rights and freedoms, we will notify you within 72 hours of becoming aware of it.

7.6 Sending data over the internet always carries some risk. You are responsible for keeping your password and devices safe. To the extent the law allows, we are not liable for data being leaked, lost or disclosed through your own fault (for example, if you share your password with someone) or through the unlawful acts of third parties, provided we took reasonable security measures.

8. Children

8.1 The Service is not directed to anyone under 16.

8.2 We do not knowingly collect data from children under 16.

8.3 If we learn that we have collected such data without parental consent, we will delete it. Tell us at support@rescanzo.com.

9. International transfers

9.1 Rescanzo is operated from Moldova, and our server is in Germany. Google, Dodo Payments and the cloud AI provider may process data in the United States and other countries, and Yandex and Robokassa in Russia. By using the Service, you consent to these transfers.

9.2 For transfers of data from the European Economic Area to countries without an equivalent level of protection, we rely on the European Commission's Standard Contractual Clauses or other lawful mechanisms maintained by our providers.

10. Changes to this policy

10.1 We may update this policy when the Service or the law changes. The edition date is shown at the top of the page.

10.2 We will notify you of material changes by email and/or in the app before they take effect.

10.3 By continuing to use the Service after the changes take effect, you accept the new edition.

11. Contact

For questions or notices regarding this document:

Service

Rescanzo

Email

support@rescanzo.com

Address

Chisinau, Republic of Moldova, MD‑2038

Website

rescanzo.com

Seller for ruble payments

ИП Музеев Ильнур Шамильевич

Seller's address

Nizhny Novgorod, Russia