Privacy
What RIHTAN collects, what we use it for, and what we don't do at all: no tracking cookies, no selling or sharing of your data for anyone else's purposes, deletion on request.
RIHTAN LLC, Boca Raton, Florida, United States, is the data controller for everything described here. Questions go to hello@rihtan.com.
What you send us: your email address, your brand name, your official domains and storefronts, the product names and keywords you ask us to monitor, and, if you subscribe, your billing details, which are held by our payment provider, not by us. When you request a free scan we also record the IP address the request came from, to limit abuse.
Running your scans, grading matches, showing them to you on your results page and sending you alerts. Nothing else.
No tracking cookies, no ad scripts, no selling or sharing of your information, and your documents are never used for anything beyond your own scans. Traffic is counted in aggregate by our host (Cloudflare Web Analytics); it sets no cookies and identifies no one.
The public site sets no cookies. Your results page keeps your sign-in session in your browser's local storage, so the link we email you keeps you signed in. In the same place it remembers when you last visited, to mark what is new, and, briefly, that you were on your way to subscribe. The checkout window is provided by Paddle, which loads its own scripts and sets its own technical cookies under its privacy notice. Our host may set a short-lived technical cookie to block automated abuse.
Scans store a full-page capture and the public listing details of each match. Captures are kept for as long as you subscribe and for 90 days after, then deleted; a copy you have exported stays with you.
Payments are handled by Paddle.com as Merchant of Record; purchase data is processed under Paddle's own privacy notice, and Paddle acts as an independent controller for payment, tax and fraud purposes. Our infrastructure providers, each bound by its own data processing terms: Cloudflare (hosting and analytics), Supabase (database), Paddle (payments, as merchant of record) and our transactional email provider. Our infrastructure providers act on our instructions only and may not use your data for their own purposes; Paddle processes purchase data independently, under its own privacy notice.
Your data is stored in the European Union (Frankfurt). Our scanning systems run in Istanbul, and the company is based in the United States; access from those locations is limited to performing the contract with you (GDPR Art. 6(1)(b) and 49(1)(b)).
You can ask for a copy of your data, have it corrected, have it deleted, or get it in a portable format at any time; your results page exports everything you have, and the rest takes one email. We answer within 30 days. If you are in the EEA or UK you may also complain to your local data protection authority. California residents have the same rights under the CCPA; we do not sell or share personal information and never have.
Data is encrypted in transit and at rest, access is limited to the people who run the service, and sign-in uses one-time emailed links rather than passwords. If a breach affects your data, we tell you by email without undue delay and, where the law requires, within 72 hours.
The service is for businesses and is not directed at anyone under 16; we do not knowingly collect their data.
If this policy changes in a way that matters, we email you before it takes effect. Last updated October 1, 2026.
Ask, or use the button on your results page, and we delete your account, your configuration and your captures, except the minimum we are required to keep: invoicing records held by our payment provider. Email hello@rihtan.com.