Privacy Policy

Back to Home

ScanVibe ("we," "our," or "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and the choices you have. By using our Service at scanvibe.live, you agree to the practices described in this Policy.

1. Information We Collect

Information you provide directly:

• Account information: name, email address, username, and password when you register.
• Images: photos you upload for product scanning.
• Barcode inputs: EAN/UPC codes you enter manually.
• Contact form submissions: name, email, subject, and message when you contact us.

Information collected automatically:

• Usage data: pages visited, features used, scan history, and interactions with the Service.
• Device & technical data: IP address, browser type, operating system, and referring URLs.
• Cookies and similar technologies: session cookies for authentication and preference cookies.

2. How We Use Your Information

Purpose	Data Used	Legal Basis
Provide the product scanning service	Images, barcodes, account info	Contract performance
Identify products using AI	Uploaded images (sent to OpenAI GPT-4 Vision API)	Contract performance
Compare prices across retailers	Product name/description (sent to SerpAPI)	Contract performance
Manage your account and authentication	Email, username, password (hashed)	Contract performance
Respond to support inquiries	Contact form data, email	Legitimate interest
Improve the Service	Aggregated usage analytics	Legitimate interest
Comply with legal obligations	Any data as required	Legal obligation

3. How We Share Your Information

We do not sell your personal information. We may share your data with:

• OpenAI: Uploaded images are sent to the OpenAI GPT-4 Vision API for product identification. OpenAI's Privacy Policy applies.
• SerpAPI: Product names are sent to SerpAPI for price comparison searches. SerpAPI's privacy policy applies.
• Open Food Facts: Barcode queries are sent to Open Food Facts API. Their privacy policy applies.
• AWS (Amazon Web Services): Our database and infrastructure are hosted on AWS. AWS is a trusted infrastructure provider.
• Law enforcement: We may disclose data if required by applicable law, court order, or government regulation.

4. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:

• Account data: Retained until you delete your account or request deletion.
• Scan images: Transmitted to OpenAI for analysis and not stored on our servers beyond what is needed to return results to you.
• Scan results & history: Retained in your account until you delete them or close your account.
• Server logs: Retained for up to 90 days for security and debugging purposes.

5. Security

We implement industry-standard security measures including:

• HTTPS encryption for all data in transit.
• Bcrypt hashing for all passwords — we never store passwords in plain text.
• Database authentication and access controls on our AWS RDS instance.
• Regular security reviews of our codebase.

No method of transmission over the internet or electronic storage is 100% secure. If you believe your account has been compromised, please contact us immediately at support@jobbylink.co.uk.

6. Cookies & Tracking

We use the following types of cookies:

• Strictly necessary cookies: Session cookies required for authentication and security (CSRF protection). These cannot be disabled.
• Preference cookies: Remember your settings and preferences (e.g., country selection).

We do not use advertising or third-party tracking cookies. You can manage cookies through your browser settings, but disabling necessary cookies may affect Service functionality.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Data portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Restriction: Request that we restrict processing of your data in certain circumstances.

To exercise any of these rights, please contact us at support@jobbylink.co.uk. We will respond within 30 days.

8. Children's Privacy

Our Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will take steps to delete such information.

9. Third-Party Links

Our Service may contain links to third-party websites or retailers. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States (where OpenAI and AWS are based). By using the Service, you consent to such transfers. We ensure appropriate safeguards are in place for such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Service or sending you an email. The "Last updated" date at the top of this page indicates when it was last revised. Your continued use of the Service after changes constitutes acceptance of the updated Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:

• Email: support@jobbylink.co.uk
• Contact form: scanvibe.live/#contact