Your data, kept private.

We collect only what the product needs to function:

• Account data — email address and, if you provide it, your full name, via our authentication provider.
• Property and report data — address, unit, lease dates, deposit amount, landlord name and landlord email that you enter.
• Media and capture metadata — photos and videos taken during a tenant scan, plus GPS latitude/longitude, capture timestamp, device model string, a weather snapshot, room label, condition rating, your notes, and the SHA-256 hash of each file.
• Payment data — purchases are processed by Stripe. We never see or store your card number. We keep the checkout session id, product purchased, amount and status so we can unlock what you paid for.
• Support and inquiries — messages you send through the inquiry form, support tickets and the Q&A assistant.

We do not sell your data, and we do not use your photos to train models or share them with advertisers.

Media files are uploaded to a private storage bucket — there is no public URL for your photos. Images are served through short-lived signed links generated only for a signed-in account that is allowed to view that report.

Report rows, media metadata, disputes, letters and purchases live in a database with row-level security enabled on every table. Access rules are enforced by the database itself, not just by the app: by default a row is readable only by the account that owns it.

Data is encrypted in transit (HTTPS/TLS) and at rest by our infrastructure provider. Once a report is sealed, its media hashes and overall hash are treated as immutable records — we do not edit them, and neither can you, which is the point.

A landlord can see a report only when one of these is true:

• The tenant listed their email address as the landlord contact on the property, or shared the report with that email address from the report page; and
• they sign in to ScanPortal Pro with that same email address.

Their access is read-only for the report and its media. They can file a dispute or write a response letter, both of which become visible to the tenant. A share can be removed at any time. Public verification links only confirm a report number and its integrity hash — they do not expose photos, notes, or address details.

We disclose data to third parties only in these cases: our infrastructure and payment processors acting on our behalf, email delivery to addresses you provide, when you direct us to share it, or when required by valid legal process.

We keep your reports for as long as your account exists, because deposit disputes can surface long after move-out. You can delete a property, report or share from within the app; deleting a report deletes its media files and metadata. Deleting your account removes your reports, media and shares.

Purchase records may be retained after deletion where we are required to keep them for tax and accounting purposes. You may request a copy of your data or its deletion by contacting us — we will verify your identity against your account email and respond.

ScanPortal Pro is not intended for anyone under 18.

Cookies and local storage are used only to keep you signed in. We do not run third-party advertising trackers or sell behavioral data.

Questions about this policy, a data request, or a correction: reach us at support@scanportalpro.com.

We may update this policy as the product changes. The "last updated" date at the top always reflects the current version, and material changes will be surfaced in the app.