Privacy Policy

EchoBat's Privacy Policy explains what personal data we collect, how it is processed, the subprocessors involved (Cloudflare, Stripe, Resend, Sentry), retention periods, and your rights under GDPR and CCPA.

What We Collect

Account data (email, display name), billing data (handled by Stripe — we never see a card number), scan metadata (URLs you scanned, timing, summary statistics), and basic platform telemetry (which OS, which version, which engines ran). Subprocessors are Cloudflare for hosting, Stripe for billing, Resend for transactional email, and Sentry for crash telemetry. We do not sell data. GDPR and CCPA requests are honoured — see the Privacy Policy for the full procedure.