Effective 02 August 2026

Privacy

What the public tools process

The scanner processes the public URL you submit and fetches that page to look for chatbot and disclosure signals. The policy preview processes the company name, AI-system categories, and regions you submit to generate the preview.

Storage and sharing

The application does not intentionally persist scanner or preview form inputs. Its hosting provider may retain ordinary security and access logs. We do not sell submitted data and do not run advertising trackers on this site.

Local browser storage

If a paid document pack is redeemed, the browser stores an entitlement token locally so the document form can unlock the purchased output. Clearing site data removes that token from the browser.

Operator and controller

AI Disclosure Kit is operated by Clartis BV, sijsjeslaan 3b, 1950 Kraainem, Belgium. Clartis BV is the GDPR data controller for pilot-request data and the contracting entity for assisted pilots. VAT number: 1030810981.

Pilot-request storage

Pilot requests are stored in a dedicated, access-restricted managed Postgres database hosted by Supabase in the European Union (Frankfurt, Germany). The public site holds insert-only credentials and cannot read, update, or delete stored requests. Clartis BV does not sell submitted data or run advertising trackers on this site.

Purpose and legal basis

The assisted-pilot form collects the work email address you choose to submit. Clartis BV uses it only to receive, respond to, and scope your requested pilot. If you would personally enter the pilot contract, this processing is necessary to take steps at your request before entering a contract, under Article 6(1)(b) GDPR. If you contact us on behalf of an organisation that would enter the contract, Clartis BV processes the same limited business-contact data under Article 6(1)(f) GDPR, based on its legitimate interest in responding to and managing a solicited B2B pilot enquiry. Clartis BV does not use an inbound pilot request to enrol you in unrelated marketing or for unsolicited automated follow-up.

Retention

Clartis BV deletes or irreversibly anonymises an unconverted pilot-request record no later than 12 months after submission. If the request becomes an active pilot or customer engagement, records needed for the contract, invoicing, accounting, disputes, or other legal obligations follow the applicable separate retention periods. If you object to direct marketing, Clartis BV may retain only the minimum suppression record needed to comply with that objection under Articles 6(1)(c) and 21 GDPR; that record is not used for marketing or any other purpose.

Privacy or deletion request: jp@scale-inc.co