Privacy Policy - Cookie Compliance Checker

1. What the Tool Does

The Cookie Compliance Checker ("the Tool") is a SaaS that scans websites you own or are authorized to test for GDPR / ePrivacy, CCPA/CPRA (GPC), IAB TCF, and Google Consent Mode v2 cookie-consent compliance. It loads each target URL in automated headless browsers from one or more regions and records what the site does before and after a visitor accepts or rejects cookies.

2. Information We Collect

Account data (you provide)

Email address, name (optional), organization name, and authentication credentials handled by our identity provider. We do not store your password.

Billing data

Subscription and credit-purchase records and payment status. Card details are handled entirely by our payment processor (Razorpay) - we never see or store them.

Scan inputs

The URLs (target websites) you submit, plus the regions and scenarios you select.

Scan evidence (generated by the Tool)

For each scan we capture and store technical artifacts of the target site, which may include cookies set, network requests, detected Consent Management Platform (CMP), GPC / IAB TCF / Google Consent Mode signals, banner text and timing, and screenshots of the page. These artifacts describe the target website. A screenshot or request log could incidentally contain personal data shown on that page - see section 5 (Controller / Processor Roles) for how responsibility for that data is allocated.

Usage and diagnostic data

Logs needed to operate the service: timestamps, error records, API-key usage.

3. How We Use the Information

We use the information we collect to:

• Run scans you request and produce compliance reports and alerts.
• Manage your account and process billing.
• Send service emails (e.g. "your scan is ready", drift alerts, team invites).
• Provide customer support.
• Secure and improve the service.

4. Legal Bases (GDPR)

• Performance of contract - providing the service you signed up for.
• Legitimate interests - security, service improvement, fraud prevention.
• Consent - where required, e.g. certain marketing emails.
• Legal obligation - tax and accounting records.

5. Controller / Processor Roles

For your account and billing data, RCB Digital Solutions is the data controller.

For scan evidence relating to a target website you submit, you are responsible for ensuring you have the right to scan that site. We act as a processor handling that material on your instructions solely to deliver the scan result.

6. Sub-processors

We use the following sub-processors to operate the Tool. Each processes data only as needed to provide their part of the service.

7. International Transfers

Scans run from multiple regions and the sub-processors above may process data outside your country. Where required by applicable law, transfers rely on appropriate safeguards such as Standard Contractual Clauses (SCCs). You can request a copy of the relevant safeguards by emailing hello@getinlytics.com.

8. Data Retention

Account and billing records are kept while your account is active and for as long as required by law (e.g. tax/accounting obligations).

Scan evidence (screenshots, cookies, network requests, consent-signal captures) is retained for 12 months after the scan date, after which it is deleted. You can request deletion of your scan data at any time by emailing hello@getinlytics.com.

9. Your Rights

Subject to applicable law, you have the right to request access, correction, deletion, restriction of processing, portability, or to object to processing of your personal data. You also have the right to lodge a complaint with a data protection supervisory authority.

To exercise any of these rights, email hello@getinlytics.com. We will respond within 30 days (acknowledging within 48 hours).

10. Security

We use access controls, encryption in transit (TLS), hashed API keys, and least-privilege service credentials. No method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Children

The Tool is for business use and is not directed to children. We do not knowingly collect personal data from anyone under 16.

12. Contact

For any privacy questions, data subject requests, or to request our Data Processing Agreement (DPA), email hello@getinlytics.com.

Related: Terms of Service · Refund Policy · Main Privacy Policy

Last updated: 17 June 2026