GDPR

Last updated: 10 November 2026

This page explains how Search Scanner AI meets the EU General Data Protection Regulation and the UK GDPR. It applies the Ucartz GDPR notice to this app. What we collect and why is in the Privacy Policy.

1. Controller

The controller is Ucartz Online Private Limited, Near LP School, Agasthiyacodu, Anchal, Kollam, Kerala 691306, India. Data protection contact (DPO for the EU and UK): compliance@ucartz.com.

2. Our role for scan data

For your account, sign-in and usage data, Ucartz is the controller. For the page content we fetch from the sites you add, we act on your instruction and only to produce your report; if those pages contain personal data and you are the site's controller, we process it for you as a processor, under these terms and the data processing terms in the Ucartz GDPR notice (section 11). Agencies scanning client sites are responsible for having the client's permission.

3. Legal bases

• Contract (Art. 6(1)(b)): your account, sign-in, scans and reports.
• Legitimate interest (Art. 6(1)(f)): security, abuse prevention, rate limits (including the hashed IP of the homepage check), fixing faults. We have weighed these against your rights; the data used is minimal.
• Legal obligation (Art. 6(1)(c)): records and lawful requests.
• Consent (Art. 6(1)(a)): connecting an AI assistant; you can withdraw it by disconnecting.

We use no analytics or advertising cookies, so no cookie consent is needed for the app. We make no automated decisions with legal or similar effect.

4. International transfers

The app's server is in the United States and Ucartz operates from India. Personal data of EU and UK users is therefore transferred outside the EEA and UK. These transfers rely on the European Commission's Standard Contractual Clauses (and the UK addendum) or, where they apply, on your request to use the service (Art. 49(1)(b)), as the Ucartz GDPR notice describes. Google (sign-in, and PageSpeed when enabled) processes data under its own safeguards.

5. Retention

Site data stays until you remove the site or clear its data; log events 30 days after they were last seen; homepage check records 30 days; account data until you close the account, then deleted except what the law requires us to keep. Details: Privacy Policy, retention.

6. Your rights

• Access (Art. 15) and portability (Art. 20): a copy of your data; scan results can also be downloaded as CSV from every list.
• Rectification (Art. 16).
• Erasure (Art. 17): remove a site in Settings, or ask us to delete the account.
• Restriction (Art. 18) and objection (Art. 21), including to processing based on legitimate interest.
• Withdraw consent at any time, without affecting earlier processing.

7. How to make a request

Email compliance@ucartz.com from the address of your account (so we can verify it is you). We reply within one month; complex requests may take up to two months more, and we will tell you if so. Requests are free.

8. Complaints

Please contact us first. You also have the right to complain to the data protection authority where you live or work, or, in the UK, to the Information Commissioner's Office (ICO).

Contact

Privacy Policy · Terms of Service · Acceptable Use · GDPR · DPDP (India) · Contact