← StreamScoutAILEGAL / PRIVACY

Privacy policy

Version 25 August 2026 · Please read this document carefully.

01

Controller and scope

Buchhart Digital & Trade e.U., Reclamgasse 56, 1220 Wien, Österreich · admin@streamscout.tools. This policy covers the website, user dashboard, visual analysis, support system and browser extension.

02

Data categories and purposes

  • Account data: authentication, profile and service delivery.
  • Product images and analysis results: performance of the requested verification and certificate creation.
  • Billing data: payment and subscription administration through Stripe.
  • Support data: handling and documenting requests.
  • Technical security logs: IP address, browser type, timestamp and error data.
  • Optional extension telemetry: pseudonymous installation ID, browser family, extension version, event type, error code, duration and timestamp. No browsing history, page content or complete URLs.
03

Legal bases

Art. 6(1)(b) GDPR for contract performance; Art. 6(1)(c) for statutory duties; Art. 6(1)(f) for security, fraud prevention and service stability; Art. 6(1)(a) for optional telemetry and communications based on consent. Consent can be withdrawn prospectively at any time.

04

Processors and transfers

SupabaseAuthentication and EU database hostingIONOSApplication hosting and server logsStripePayments and subscriptionsResendTransactional and support email, when enabled

Processors are bound by appropriate contracts. Where processing outside the EEA cannot be excluded, a valid transfer mechanism and supplementary safeguards are used.

05

Retention and automated analysis

Product originalsOnly for the analysis duration unless storage is expressly requestedSecurity logs30 daysExtension events90 days, then deletion or irreversible aggregationSupport tickets24 months after closureAccounting recordsStatutory retention period

The AI output is a risk assessment. Where an outcome may significantly affect an account, users may request an explanation, human review and correction; no final solely automated account sanction is imposed.

06

Your rights

You may request access, rectification, erasure, restriction, portability and object to processing. You may withdraw consent and lodge a complaint with the Austrian Data Protection Authority at dsb.gv.at. Contact us at the address above.