Privacy Policy

Last updated: March 12, 2026

1. Data Controller

S&C Holding GmbH
Halbgasse 1a, 1070 Vienna, Austria
Email: privacy@agentspeed.dev

2. What Data We Collect

2.1 Scan Data

When you scan a website, we collect the URL you entered, the scan results, and your IP address (for rate limiting). Scan results may be cached for up to 24 hours.

2.2 Deep Scan Data

If you purchase a Deep Scan, we additionally collect your email address (provided during Stripe checkout) to send you the scan results. Deep Scan results are stored permanently so you can access your report via permalink.

2.3 Payment Data

Payments are processed by Stripe, Inc. We do not store credit card details. Stripe's privacy policy applies to payment processing: stripe.com/privacy.

2.4 Feedback

If you submit feedback, we collect the message content and optionally your email address (if you provide it).

2.5 Analytics

We use Mixpanel to understand how our service is used. Mixpanel collects anonymized usage data including page views, button clicks, and feature usage. No personally identifiable information is sent to Mixpanel.

3. Legal Basis for Processing

We process your data based on:

Contract performance (Art. 6(1)(b) GDPR) — to perform the website scan you requested
Legitimate interest (Art. 6(1)(f) GDPR) — for rate limiting, security, and service improvement
Legal obligation (Art. 6(1)(c) GDPR) — for tax and accounting requirements

4. How We Use Your Data

To perform the website scan you requested
To send Deep Scan results to your email
To provide permanent access to your Deep Scan report
To prevent abuse (rate limiting)
To improve our service based on usage patterns
To respond to your feedback

5. Data Sharing

We share data with the following service providers:

Vercel — Hosting (serverless functions, EU region)
Stripe — Payment processing
Upstash — Redis database for scan results (EU region)
Resend — Transactional email delivery
Mixpanel — Product analytics
Browserless — Headless browser for Deep Scans

We do not sell your personal data. Data is shared only as necessary to provide our services.

6. Data Storage & Retention

Basic scan results: cached up to 24 hours
Deep Scan results: stored permanently
Payment records: 7 years (Austrian tax law)
Feedback: until resolved or deleted upon request

7. Your Rights (GDPR)

Under the GDPR, you have the right to:

Access — request a copy of your personal data
Rectification — correct inaccurate data
Erasure — request deletion ("right to be forgotten")
Restriction — limit how we process your data
Data portability — receive your data in a machine-readable format
Objection — object to processing based on legitimate interest

To exercise these rights, email privacy@agentspeed.dev. We will respond within 30 days.

8. Cookies

AgentSpeed does not use cookies for tracking. Mixpanel uses local storage for anonymous device identification. Stripe may set cookies during the checkout process.

9. Children

AgentSpeed is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at privacy@agentspeed.dev.

10. Supervisory Authority

You have the right to lodge a complaint with the Austrian Data Protection Authority:

Österreichische Datenschutzbehörde
Barichgasse 40-42, 1030 Vienna
www.dsb.gv.at

11. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "last updated" date.