Privacy Policy

Who we are

StakScan (“we”, “us”, “our”) is a UK-based business assessment tool operated at stakscan.com. We help service businesses understand where AI and automation can save them time and money.

What data we collect

When you complete a StakScan assessment, we collect the following information:

Information you provide: your email address, business type, team size, answers to our assessment questions, and any free-text responses you enter (such as your biggest business challenge).

Automatically collected: we may collect basic analytics data such as your approximate country (derived from IP address), the page you arrived from, and the date and time of your visit. We do not use tracking cookies for advertising.

Payment information: if you purchase a paid audit, payment is processed securely by Stripe. We never see or store your full card details — Stripe handles this directly.

How we use your data

We use your information to:

• Generate your personalised assessment results and Mini Audit PDF
• Email you your results and any follow-up information
• Process payments for paid audits (via Stripe)
• Improve StakScan based on aggregate, anonymised usage patterns

We do not sell, rent, or share your personal data with third parties for marketing purposes. Full stop.

AI processing

Your assessment answers are processed by AI (Anthropic’s Claude) to generate personalised insights and recommendations. Your answers are sent to the AI solely for the purpose of generating your report — they are not used to train AI models. We do not send your email address to the AI.

Where your data is stored

Your assessment data is stored securely in Supabase (hosted on AWS infrastructure). Emails are sent via Resend. Both services use encryption in transit and at rest. Your data may be processed in the EU, UK, or US depending on the service provider.

How long we keep your data

We retain your assessment data for up to 24 months so you can return and compare future scans. You can request deletion at any time by emailing us (see below).

Your rights (GDPR)

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct any inaccurate information
• Deleteyour data (“right to be forgotten”)
• Object to processing of your data
• Export your data in a portable format
• Withdraw consent at any time

To exercise any of these rights, email us at hello@stakscan.com. We will respond within 30 days.

Cookies

StakScan uses only essential cookies required for the site to function (such as session management). We do not use advertising or tracking cookies. If we ever add analytics cookies, we will update this policy and ask for your consent first.

Third-party services

We use the following third-party services to operate StakScan:

• Vercel — website hosting
• Supabase — database storage
• Anthropic (Claude) — AI-powered report generation
• Resend — transactional email delivery
• Stripe — payment processing

Each of these services has its own privacy policy. We only share the minimum data required for each service to function.

Changes to this policy

We may update this policy from time to time. If we make significant changes, we will notify you by email or by placing a notice on our website. The “last updated” date at the top of this page will always reflect the most recent version.

Contact us

If you have any questions about this privacy policy or how we handle your data, please email hello@stakscan.com.