Template - review before you rely on it. This is a starting point, not legal advice. Fill in the bracketed details and have a qualified professional review it for your jurisdiction and business.
Privacy Policy
Last updated: 27 September 2026
This policy explains how Discloze (“we”) handles data when you use Discloze (the “Service”). We aim to collect as little as possible.
Who is responsible (data controller)
The data controller is Discloze. Contact us at hello@discloze.tech.
What we collect
- Scan input: the website URL you submit, and an email address if you choose to provide one for the report.
- Scan results: data gathered from the public pages of the site you ask us to scan - image/media URLs, embedded metadata (e.g. C2PA / IPTC), detected chat-widget signatures, and the findings we derive from them.
- Technical logs: standard server logs (e.g. IP address, timestamp, request path) kept for security and debugging.
Why we use it (legal bases)
- To run the scan you requested and show/return your report (to perform the service you asked for).
- To email your report, if you provided an email (your consent).
- To secure, maintain and improve the Service (our legitimate interests).
Scanning third-party sites
When you submit a URL, our crawler fetches that site's publicly accessible pages and media to analyse them, and respects the site's robots.txt. Only submit sites you own or are authorised to assess.
Sharing & processors
We share data only with service providers needed to run the Service, for example our hosting/email provider (to store scans and send report emails) and, if you use the metadata embedder with C2PA signing, a timestamp authority. We do not share your data for their own marketing.
Retention
We keep scan records for as long as needed to provide the Service and maintain an audit trail, and delete or anonymise them on request. Email addresses are kept until you ask us to remove them.
Your rights
Depending on where you live (e.g. the EU/UK under the GDPR, or California), you may have rights to access, correct, delete, or port your data, and to object to or restrict processing. To exercise any of these, email hello@discloze.tech. You may also complain to your local data-protection authority.
Cookies & local storage
We use only essential browser storage (for example to remember that you've seen our cookie notice or your last-used settings). We set no analytics or advertising cookies.
Children
The Service is for businesses and is not directed at children.
Changes
We may update this policy; the “last updated” date will change. Material changes will be highlighted where practical.