Collimer privacy & data

We are the “data controller” for the personal data described in this policy.

Email address To send scan-completion notification + your scorecard link

Optional: ICP description, competitor list, conversion goal

IP address + timestamp Abuse prevention + rate limiting At submission

Billing data (card, billing address, invoice history)

To send scan-completion notification + your scorecard link

Abuse prevention + rate limiting

to measure aggregate funnel events: scan started, scan completed, scorecard viewed, scorecard shared, signup.

Free Scan responses: 6 months, then deleted

30 days for Free Scans; then deleted

Until you unsubscribe / delete

Only as long as needed for abuse prevention and security, then deleted or aggregated

Data is stored in the United States (Neon US-East primary; Cloudflare R2 with US default; Fly.io US default region).

we rely on our providers’ Standard Contractual Clauses or equivalent safeguards for those transfers.

The table above is our current sub-processor list.

Deletion: click the unsubscribe link in any Collimer email, or email us. We delete within 30 days, usually much sooner.

Access: request a copy of your data via hello@sandcastlelabs.ai .

Correction: email us; we update.

Portability: we provide JSON / CSV exports on request.

the right to object to or restrict certain processing, withdraw consent, and lodge a complaint with your local data protection authority.

the rights to know, delete, correct, and to opt out of “sale” or “sharing.”

We do not sell or share personal information as those terms are defined, so there is nothing to opt out of.