Privacy Policy

Effective date: to be confirmed upon legal review.

1. Who we are

Mendarix (“we”, “us”, “our”) is a website-health monitoring service. We scan publicly accessible URLs at your request and provide health scores, diagnoses, and recommended fixes.

2. What data we collect

We collect and process the following categories of data:

• Scan data: The URL you submit for scanning, the health-check results, and the timestamp of the scan.
• Email address: Optional. Provided voluntarily when you request a report or subscribe to monitoring. Used to send you scan results and product updates.
• IP address (hashed): We apply a daily-rotating salt and hash your IP address before storing it. We use this only for rate-limiting free scans. Raw IP addresses are never stored.
• Payment data: Handled exclusively by our Merchant of Record (Paddle). We do not receive or store raw card data.
• Usage data: Standard server logs (response codes, latencies) for operational purposes. These are retained for up to 90 days.

3. How we use your data

• To perform website health scans you request.
• To send you scan results and monitoring alerts (when you subscribe).
• To prevent abuse and enforce rate limits (hashed IP).
• To improve the accuracy of our scoring and diagnostic models.

We do not sell your data to third parties.

4. Legal basis (EEA / UK)

Where GDPR applies, our processing is based on:

• Contract performance: Providing the scan you requested.
• Legitimate interests: Security, fraud prevention, and service improvement.
• Consent: Marketing emails, where you have opted in.

5. Data retention

• Free scan results: retained for 30 days.
• Subscription scan history: retained while your account is active and for 12 months after cancellation.
• Email addresses: retained while your account is active. Deleted within 30 days of a verified deletion request.
• Hashed IP logs: rotated automatically every 24 hours.

6. Cookies

This site does not use tracking or advertising cookies. We may set a session cookie solely to maintain your authenticated state if you are logged in.

7. Your rights (EEA / UK residents)

You have the right to access, rectify, or erase your personal data; to restrict or object to processing; and to data portability. To exercise these rights, email us at privacy@mendarix.com.

8. Third-party services

• Paddle: Merchant of Record for payment processing. Their privacy policy governs payment data.
• Supabase: Database hosting. Data is stored in the EU (or nearest available region).

9. Contact

Questions about this policy? Email privacy@mendarix.com.