Home / Privacy Policy

Privacy Policy

Last updated: 20 July 2026

This policy explains what personal data Lantad collects, why, who we share it with, and the rights you have. We keep data collection to the minimum needed to run a free scanning tool. Plain-English summaries sit next to the detail so you can see exactly what happens to your information.

1. Who we are

Lantad ("Lantad", "we", "us", "our") is an AI-visibility scanning service operated from the United Kingdom. The incorporation of Lantad Ltd in England and Wales is in progress; until it completes, the individual operating Lantad is the data controller for the purposes of the UK GDPR and the Data Protection Act 2018, and the company will assume that role on incorporation. You can reach us at hi@lantad.co, which is also the address for any privacy request or formal notice.

2. What we collect

Information you give us

• URLs and robots.txt you submit. The pages, domains, or robots.txt text you ask us to scan, compare, or test. Submitting a URL is a request for us to fetch and analyze that page.
• Email address (optional). Only if you provide one, so we can send you a report link, monitoring alerts you opted into, or a reply to a fix request.
• Fix-request details. If you contact us through the services form: your name (optional), email, website, timeline, and message.
• Marketing preference. If you tick the optional consent box, we treat that as your consent to occasional product findings and updates.

Information collected automatically

• IP address. Used to enforce rate limits, prevent abuse, and keep the service secure. We do not use it to build a profile of you.
• Basic request and log data. Standard technical information such as timestamps and the endpoints called, kept short-term for security and reliability.
• Human-verification (Turnstile). We use Cloudflare Turnstile to tell humans from bots. It is designed to be privacy-preserving and does not track you across other websites.

We do not use advertising or cross-site tracking cookies. Any analytics we use are privacy-friendly and do not profile you or follow you around the web.

Content within the pages you scan

When you submit a URL, we fetch that page and process its content to produce your result. If a page you submit happens to contain personal data, we process it only transiently to generate your report and do not reuse it. The "What AI says about you" tool sends the text extracted from the page you submit to an AI model (see subprocessors below) to generate the comparison. Only submit pages you are entitled to have us fetch (see our Terms).

3. Why we use it, and our legal bases

• To provide the service you asked for (running a scan, comparison, multi-page scan, tool, or sending your report link). Legal basis: performance of a contract, or steps taken at your request before entering one.
• To keep the service secure and prevent abuse (rate limiting, blocking attacks). Legal basis: our legitimate interests in protecting the service and other users.
• To respond to your enquiries and, where relevant, discuss our paid fix service. Legal basis: legitimate interests, or steps before a contract.
• To send marketing only where you have opted in. Legal basis: your consent, which you can withdraw at any time.

4. Who we share it with (subprocessors)

We do not sell your personal data. We share it only with the providers we need to run the service:

• Cloudflare, Inc. Hosting, content delivery, edge compute, storage, security and human-verification (Turnstile), page rendering, and the AI model that powers the "What AI says about you" check. Data may be processed on Cloudflare's global network.
• Resend (email delivery). Used only to send the report link, monitoring alerts, or replies you asked for.
• Stripe (payments). If you buy a paid plan, checkout and billing run entirely on Stripe. Your card details go to Stripe directly and never touch our systems; we receive only your email, the plan you bought, and a customer reference.

These providers act as our processors under contract and may only use the data to provide their service to us. We may also disclose data if required by law or to protect our rights, users, or the public.

5. International transfers

Our providers operate globally, so your data may be processed outside the United Kingdom and the European Economic Area, including in the United States. Where it is, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or Addendum, the EU Standard Contractual Clauses, or a valid adequacy decision.

6. How long we keep it

• Scan results and artifacts are kept for up to 18 months, after which they are deleted or made inaccessible. Result links are not intended to be permanent.
• Email addresses are kept until you unsubscribe or ask us to delete them, or until the purpose ends.
• Security logs are kept short-term.

7. Your rights

Under the UK GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to our processing;
• data portability;
• withdraw consent at any time (for anything based on consent); and
• complain to the Information Commissioner's Office (ico.org.uk) if you think we have mishandled your data.

To exercise any of these, email hi@lantad.co. We aim to respond within one month.

California residents. Under the CCPA and CPRA you have the right to know, delete, and correct your personal information, and to opt out of its "sale" or "sharing". We do not sell or share your personal information for cross-context behavioural advertising, and we will not discriminate against you for exercising your rights. Contact us at the same address to make a request.

8. Children

Lantad is a tool for website owners and professionals and is not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us data, contact us and we will delete it.

9. Security

We use reasonable technical and organisational measures to protect your data, including a serverless architecture, transport encryption, and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Cookies

We use only essential cookies and similar technologies needed to run the service and keep it secure, such as the Cloudflare Turnstile human-check. We do not use advertising or cross-site tracking cookies, so there is no cookie consent banner to click through.

11. Changes to this policy

We may update this policy as the service evolves or the law changes. The date at the top shows the latest version, and we will flag material changes where we reasonably can.

12. Contact

Questions or requests about your data: hi@lantad.co. See also how our scanner behaves in the crawler conduct policy and the Terms and Conditions.