Privacy Policy
Last updated: 15 November 2026
1. Who is responsible
Infinity Digital Solutions DOO (trading as Infiteq)
Slanački put 76N/19, Belgrade, Serbia
Company ID (registration no.): 22052870 · Tax ID (PIB): 114661160
Email: office@infiteq.io
For the purposes of the Serbian Law on Personal Data Protection and, where applicable, the EU General Data Protection Regulation (GDPR), Infinity Digital Solutions DOO is the data controller. This policy covers the website scan.infiteq.io (the “Service”). It explains what personal data we process when you use it, why, and what your rights are.
2. What we process
| Data | Why | Legal basis (GDPR) | How long |
|---|---|---|---|
| The website address you enter, the market you pick, and the time of the request | To run the scan and show you the result | Art. 6(1)(b) (providing the service you asked for) | 30 days, or 90 days for paid reports |
| Scan results: findings, a screenshot of the homepage, and the text of the legal pages we read on the scanned site. This is publicly visible website content. | To build your report | Art. 6(1)(b) | 30 days, or 90 days for paid reports |
| Your IP address, stored only as a keyed hash (we cannot read the IP back from it) | To limit abuse: 5 scans per hour and 20 per day per visitor | Art. 6(1)(f) (protecting the Service) | 30 days |
| Your IP address and browser details, processed by Cloudflare Turnstile | To check that you are a human before a scan starts | Art. 6(1)(f) (security) | Held by Cloudflare under its own terms |
| Your email address, when you buy a report or ask us to email you a report | To send the report link and PDF and to track scan credits | Art. 6(1)(b) | Report data: 90 days. Order records (including email): as long as accounting law requires |
| Order data from Lemon Squeezy: order number, email, amount, currency. We never see your card details. | To unlock your report and provide credits | Art. 6(1)(b), Art. 6(1)(c) (bookkeeping) | As long as accounting law requires |
| Meta Pixel events (page view, scan finished, checkout started, purchase), only if you accept | To measure whether our advertising works | Art. 6(1)(a) and § 25(1) TDDDG (your consent) | Held by Meta under its own terms |
3. Storage on your device
We store a few items in your browser’s local storage. They are essential and do not need consent: your cookie choice, and a private token for each scan you start so that your browser can retrieve a report you paid for. We set no advertising or analytics cookies unless you accept the Meta Pixel.
4. Meta Pixel (only with your consent)
If you click “Accept all”, we load the Meta Pixel from Meta Platforms Ireland Limited. It receives the events listed above, with the purchase value and currency for purchases. We have switched off automatic event collection and advanced matching, and we never fire the pixel on private report pages. If you click “Reject all”, nothing is loaded from Meta. You can change your choice at any time with “Cookie settings” in the footer.
5. Who receives data
- Anthropic, PBC (USA): our AI provider. We send it the text of the scanned site’s privacy policy and imprint, a screenshot of the scanned homepage and the technical findings, so that it can review them and write explanations and fix instructions. We do not send your email or IP address.
- Lemon Squeezy: payment provider and merchant of record. It handles payment and invoicing and passes us the order data.
- Railway (hosting and database, EU region) and Netlify (hosting of the website files).
- Resend: sends the emails you ask for, including the PDF report.
- Cloudflare: Turnstile human check.
- Meta Platforms Ireland Limited: only if you consent.
Some of these providers process data outside the EU. Where personal data is transferred to a country outside Serbia and the EEA, such as the United States, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or equivalent mechanisms under Serbian data protection law, as offered by each provider.
6. The websites we scan
The scanner opens the public pages of the website you enter in a real browser, like a visitor would. It does not log in, submit forms or click purchase buttons on the scanned site.
7. Your rights
You have the right to access, correct, delete and restrict the processing of your data, to data portability, and to object to processing based on legitimate interests. Where processing is based on consent you can withdraw it at any time with effect for the future. To exercise a right, write to office@infiteq.io. You also have the right to lodge a complaint with a supervisory authority. In Serbia this is the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs). If you are in the EU or EEA, you can also complain to your local data protection authority.
8. Changes
We update this policy when the Service changes. The date at the top shows the latest version.