Privacy Policy
Last updated: July 11, 2026
Privacy Policy
This policy explains what personal data we process when you use answerscan.eu, why we process it, where it goes, and what rights you have. It is written for the product we actually run: a one-time report bought through guest checkout. There are no user accounts, no passwords, and no subscriptions.
1. Who is responsible (data controller)
Flowstart Kft, a company registered in Hungary. EU VAT number: HU32538133. Contact for all privacy matters: info@flowstart.eu.
2. What data we collect
We collect only what is needed to produce and deliver your report:
- Your email address, collected during Stripe checkout, used to deliver the report link and the purchase receipt.
- The business details you enter in the scan form: business name, website URL, business description, target market (country), language, and up to 3 competitor names.
- Payment data (card details, billing information) is collected and processed by Stripe, which acts as merchant of record. We never see or store your card details.
- Technical data: your IP address is processed transiently to rate-limit the checkout endpoint and prevent abuse. Standard server logs are kept by our hosting provider.
We do not collect account data, passwords, profile data, or published content, because none of those exist in this product. We run no analytics or advertising trackers.
3. Why we process it (legal basis under GDPR Article 6)
- Performance of a contract (Art. 6(1)(b)): generating and delivering the report you paid for, and sending you the report link and receipt.
- Legitimate interest (Art. 6(1)(f)): preventing fraud and abuse of the checkout and scan pipeline (rate limiting, abuse detection), and defending legal claims.
If you enter competitor names, we process those business names on the basis of our and your legitimate interest (Art. 6(1)(f)) in producing a competitive comparison. Where a competitor name identifies a natural person (for example a sole trader), the report reproduces publicly available AI engine output about that business, dated and unedited.
4. Where your data goes (recipients and subprocessors)
To produce the report, your data is processed by these providers:
| Provider | Role | Location |
|---|---|---|
| Neon | Database hosting (stores your email and the business details you enter) | United States |
| Stripe | Payment processing, merchant of record | United States |
| OpenAI | Runs the buyer-intent prompts (receives the business details you enter) | United States |
| Apify | Collects Google AI Overview results (receives the queries derived from your business details) | United States |
| Listmonk | Email delivery (self-hosted; receives your email address) | Self-hosted by us |
We do not sell your data and we do not share it with anyone else except where the law requires it.
5. International transfers
Several of the providers above process data in the United States. These transfers are made under the European Commission's Standard Contractual Clauses (GDPR Chapter V, Art. 46(2)(c)) as implemented in the providers' data processing agreements. You can request more information about the transfer safeguards at info@flowstart.eu.
6. How long we keep it
- Report data (the business details you entered, the engine answers, and the generated report) is kept for 12 months from purchase, then deleted.
- Your email address is kept for the same 12-month period for report re-delivery and support, then deleted, except where a longer retention is required for tax or accounting records.
- IP addresses used for rate limiting are held in memory only and are not persisted by us.
7. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you,
- have inaccurate data corrected,
- have your data erased,
- restrict or object to processing based on legitimate interest,
- receive your data in a portable format.
To exercise any of these rights, email info@flowstart.eu. We respond within one month.
You also have the right to lodge a complaint with a supervisory authority. Our lead authority is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, naih.hu). You may also complain to the authority in your own EU member state.
8. Cookies
We set only strictly necessary cookies. There are no analytics, advertising, or tracking cookies. See the Cookie Policy for details.
9. Automated processing
The report is generated automatically by AI engines. It is an informational snapshot of what those engines answered on a given date. It produces no legal or similarly significant effect on you within the meaning of GDPR Art. 22.
10. Changes
If we change this policy, we will post the new version on this page with a new date. Material changes to how we process buyer data will be communicated to affected buyers by email where we still hold an address.
11. Contact
Flowstart Kft, info@flowstart.eu.