This policy explains how FDscout (operated by Isaac Pells, trading as FDscout — the "data controller") handles your personal data. Contact: contact@fdscout.com.
Account data: your email address, a salted hash of your password (never the password itself), and — if you sign in with Google — your Google account identifier and verified email. Billing data: handled by Stripe; we store only your Stripe customer and subscription references, never card details. Usage data: pages and profiles viewed, feature usage and approximate request counts (per IP), used for the free-tier limits, abuse prevention and improving the Service.
We use essential cookies only: a session cookie to keep you signed in, a visitor identifier used for free-tier limits, and a short-lived state cookie during Google sign-in. No advertising or cross-site tracking cookies.
To provide and secure the Service (contract); to send transactional email such as verification, password reset and account notices (contract); to enforce free-tier limits and prevent abuse (legitimate interest); and, only if you opt in, to send product updates (consent, withdrawable any time).
We use: Cloudflare (hosting, database and content delivery), Stripe (payments), Resend (transactional email, processed in the EU — Ireland), and Google (optional sign-in). Each processes data under its own GDPR-compliant terms. Some processing may occur outside the UK/EEA under appropriate safeguards (standard contractual clauses).
Account data is kept while your account exists and deleted within 30 days of account closure, except records we must keep for tax and accounting. Usage counters expire automatically (most within days).
Under UK GDPR you can request access, correction, deletion, portability or restriction of your data, and object to processing based on legitimate interest — email contact@fdscout.com. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
We will notify material changes to this policy by email or in-app notice.