1. Overview

RAPTOR™ LLM Scanner ("RAPTOR", "we", "us", or "our") is currently operated by its founder as an individually-operated platform. Formal business entity information will be published here upon completion of pending business formation. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have over it.

We take privacy seriously. We collect the minimum data required to operate the platform and never sell your personal information to third parties.

2. What Data We Collect

2.1 Data you provide directly:

• Account registration (when live): Name, email address, password (hashed — never stored in plaintext)
• Payment data: Handled entirely by Stripe. RAPTOR receives only a Stripe Customer ID and subscription status — never your full card number or CVV
• Advertising inquiries: Company name, contact name, email, website URL, and placement interest submitted via the advertise page
• Support communications: Any email sent to our contact addresses

2.2 Data collected automatically:

• Local storage preferences: Theme selection (dark/light) and privacy banner acknowledgment — stored only in your browser, never transmitted to our servers
• Cloudflare analytics: Aggregated, anonymized traffic data (page views, country of origin, device type). No individual user tracking. No cookies set by Cloudflare Analytics.
• Server logs: Standard web server logs including IP address, request path, timestamp, and HTTP status code. Retained for 30 days for security purposes.

2.3 Data we do NOT collect:

• We do not use advertising tracking pixels or third-party ad networks
• We do not use session recording or behavioral analytics tools
• We do not sell, rent, or trade your personal data
• We do not collect data from minors under 13

3. Legal Basis for Processing (GDPR / Privacy Law)

For users in the European Economic Area, United Kingdom, and other jurisdictions with applicable privacy laws, our legal bases for processing are:

• Contract performance: Processing your account and payment data to deliver the subscription service you signed up for
• Legitimate interests: Server logs for security monitoring; aggregated analytics to improve platform performance
• Consent: Email marketing communications (opt-in only, unsubscribe available at any time)
• Legal obligation: Retaining transaction records as required by applicable tax and financial regulations

4. How We Use Your Data

• To create and manage your RAPTOR Pro account
• To process subscription payments via Stripe
• To respond to advertising inquiries and manage placement contracts
• To send transactional emails (payment receipts, account notices)
• To detect and prevent fraud, abuse, and security incidents
• To improve platform performance using aggregated, anonymized analytics

We do not use your data for automated decision-making or profiling that produces legal or significant effects.

5. Third-Party Data Processors

We use the following third-party services that may process your data on our behalf:

• Stripe (stripe.com) — Payment processing. Stripe is PCI DSS Level 1 certified. See Stripe's Privacy Policy at stripe.com/privacy.
• Cloudflare (cloudflare.com) — CDN, DNS, and DDoS protection. Cloudflare processes request data as part of network routing. See Cloudflare's Privacy Policy at cloudflare.com/privacypolicy.
• Supabase (supabase.com) — Database hosting for user accounts and platform data. Supabase operates on AWS infrastructure. See Supabase's Privacy Policy at supabase.com/privacy.

All processors are bound by data processing agreements and are required to protect your data in accordance with applicable law.

6. Data Retention

• Account data: Retained while your account is active. Deleted within 30 days of account closure upon request.
• Payment records: Retained for 7 years as required by US tax law (IRS recordkeeping requirements).
• Server logs: Retained for 30 days, then automatically purged.
• Advertising inquiry data: Retained for the duration of the advertiser relationship plus 12 months.
• Browser local storage: Stored on your device only. Cleared when you clear your browser data.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your personal data ("right to be forgotten")
• Right to restrict processing: Request that we limit how we use your data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent for marketing communications at any time

To exercise any of these rights, email privacy@raptorllmscanner.com. We will respond within 30 days.

8. Cookies and Local Storage

RAPTOR™ does not use tracking cookies. We use browser localStorage solely to store your theme preference (dark/light mode) and your privacy banner acknowledgment. This data never leaves your device and is not transmitted to our servers.

Cloudflare may set a security cookie (__cf_bm) for bot detection purposes as part of their network infrastructure. This is a security measure, not a tracking or advertising cookie.

9. Data Security

We implement the following technical and organizational measures to protect your data:

• HTTPS/TLS encryption on all connections via Cloudflare
• Passwords stored as salted bcrypt hashes — never in plaintext
• Payment data handled exclusively by Stripe — never touches our servers
• Database access restricted to authenticated backend services only
• Infrastructure access via Tailscale VPN — no public SSH exposure
• Regular dependency updates and security patch management

No method of transmission over the internet is 100% secure. We commit to notifying affected users within 72 hours of discovering a data breach that poses risk to your rights or freedoms.

10. International Data Transfers

RAPTOR is operated from the United States. If you access the platform from outside the US, your data may be transferred to and processed in the United States, where data protection laws may differ from those in your country.

For EEA/UK users: Where required, we rely on Standard Contractual Clauses (SCCs) for international transfers to our third-party processors.

11. Children's Privacy

RAPTOR™ LLM Scanner is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us immediately at privacy@raptorllmscanner.com and we will delete it promptly.

12. Advertiser Data

If you submit an advertising inquiry or enter into a placement agreement with RAPTOR, we collect and process your business contact information for the purpose of managing that commercial relationship. This data is:

• Used only to manage your placement and communicate about your account
• Never shared with other advertisers or third parties outside our processor stack
• Retained for the duration of the relationship plus 12 months
• Deletable upon written request to privacy@raptorllmscanner.com

13. Changes to This Policy

We may update this Privacy Policy as the platform evolves. Material changes will be communicated via a notice on the platform at least 14 days before they take effect. Continued use of RAPTOR after changes take effect constitutes acceptance of the updated policy.

The version history is maintained — prior versions available upon request.

14. Contact

For privacy-related requests, questions, or concerns:

• Email: privacy@raptorllmscanner.com
• Controller: Founder-Operated Platform (formal entity pending)
• Response time: Within 30 days of receipt

If you are in the EEA and believe we have not adequately addressed your privacy concern, you have the right to lodge a complaint with your local data protection authority.