Legal

Privacy Notice

How Top Mark Solutions LLC DBA Atlantic Web Apps handles personal data when you use SEO Scanner.

Last updated 21 August 2026

Who we are

SEO Scanner is operated by Top Mark Solutions LLC, doing business as Atlantic Web Apps. We are the data controller for the personal data described in this notice: we decide what data is collected and why. Contact us about privacy at [email protected].

What we collect and why

  • Account data — name, email address, hashed login credentials or OAuth identifier, workspace and role membership. Used to create and secure your account and control access. Legal basis: performance of our contract with you.
  • Workspace and audit content — site names, URLs, audit runs, findings, reports, uploaded logos and branding, share links and their view logs. Used to provide the auditing and reporting service. Legal basis: performance of our contract.
  • Support messages — the content of emails and contact form submissions. Used to answer your questions. Legal basis: contract and our legitimate interest in supporting customers.
  • Usage and telemetry — pages viewed, features used, credit consumption, error logs, device and browser identifiers, IP address. Used to operate, secure, debug and improve the product, and to enforce plan limits and free-tool quotas. Legal basis: legitimate interests in running a reliable, secure service.
  • Security and anti-abuse data — IP address, request rate and quota records for the public demo and free tools. Legal basis: legitimate interests in preventing fraud and abuse.
  • Marketing preferences — where you opt in to product emails. Legal basis: consent, which you can withdraw at any time.
  • Billing records — the plan, order and credit ledger entries associated with your account. Payment card details are collected and processed by Stripe, our payment processor, and never reach our servers. Legal basis: contract and legal obligation.

Who we share data with

  • Service providers and subprocessors — hosting, database, authentication, email delivery, crawling and page-performance providers, AI model providers used by the assistant and generators, and support tooling. They process data only on our instructions.
  • Stripe — our payment processor, for checkout, subscription management, payments, tax calculation and invoicing.
  • Professional advisers — legal, accounting and audit advisers where necessary.
  • Authorities — where required by law, or to establish, exercise or defend legal claims.

We do not sell personal data.

International transfers

We operate from the United States and use providers that may process data outside your country, including outside the UK and EEA. Where data leaves the UK/EEA we rely on appropriate safeguards, such as UK/EU Standard Contractual Clauses or an adequacy decision. Contact us for details of the safeguards in place.

How long we keep data

We keep account data for as long as your account is active. Audit runs, findings and reports are retained according to your plan's history window and are then archived or deleted. After account closure we delete or anonymise personal data within 90 days, except where we must retain records for legal, tax or accounting purposes — typically up to seven years for billing records — or to resolve disputes.

Your rights

Depending on where you live, you have the right to access your data, correct it, delete it, restrict or object to processing, receive a portable copy, withdraw consent, and opt out of marketing. Users in the UK and EEA also have the right to complain to their supervisory authority (in the UK, the ICO). Users in California may request disclosure or deletion and will not be discriminated against for exercising those rights.

To exercise any right, email [email protected]. We respond within one month, and will tell you if we need longer for a complex request.

Security

We apply appropriate technical and organisational measures, including encryption in transit and at rest, row-level access controls that isolate each workspace's data, least-privilege service credentials, audit logging of share-link access, and regular review of security findings. No system is perfectly secure, but we work to protect your data and will notify you and the relevant authority of a qualifying breach as required by law.

Cookies

We use cookies and similar local storage for:

  • Essential — keeping you signed in, remembering your active workspace, and protecting forms against abuse. These are always on.
  • Analytics — understanding aggregate feature usage so we can improve the product.

We do not use advertising or cross-site marketing cookies. You can clear or block cookies in your browser settings, though essential cookies are required for the app to work. For full details, see our Cookie Policy.

Changes and contact

We will post updates to this notice here and, for material changes, notify you in-app or by email. Questions: [email protected]. See also our Terms of Service and Refund Policy.