1. Data controller
The data controller is
CometWeb Ltd., registered in Wrocław, Poland, KRS 0000000000. RODO/GDPR contact:
[email protected].
2. Data we collect
We collect: e-mail (registration), company name (optional), scanned URLs, technical logs (IP, user-agent, timestamp). We do not collect third-party data beyond scanned public domains.
3. Purpose of processing
We process data under contract (Art. 6(1)(b) GDPR) — to provide the service: domain scanning, report generation, billing. On the marketing site we may process analytics data under consent (Art. 6(1)(a)) via Google Tag Manager, Google Analytics 4 and Microsoft Clarity. We do not use product data for profiling or AI model training.
4. Retention
Technical logs — 30 days. Scan results — per plan (Free: none, Growth: 7 days, Studio: 14 days, Scale: 90 days). Account data — until account deletion + 30 days grace.
5. Your rights
You have the right to access, rectify, erase, restrict processing, port data, and lodge a complaint with the President of UODO (PL). We respond to requests within 72 hours.
6. Transfers outside the EU
Application data is stored on EU servers (Hostinger — Frankfurt, DE). Exception: transactional e-mail is delivered via Resend Inc. (US) under Standard Contractual Clauses.
7. Sub-processors
Stripe (payments · IE), Hostinger (hosting · LT/DE), Resend (e-mail · US, SCC), Google LLC / Tag Manager & Analytics 4 and Microsoft Clarity (marketing-site analytics · US, SCC, after consent). Full list and DPAs available on request.
8. Changes
Material changes are announced 30 days before taking effect — via email and an in-app banner. Minor edits (typos, formatting) — without notice.
Document version 4.2 · Effective from 2026-07-21