Legal

Privacy Policy

Last updated: 15 October 2026

What we collect, why, and the control you have over it. We keep it short and honest.

1. Who we are

FameScan is operated by Robert Klöpsch, Stegmattstrasse 11, 6033 Buchrain, Switzerland. For any privacy question, write to Help Center.

This policy explains how we handle personal data of the people who use FameScan: account holders and the workspace members they invite. We follow the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR).

2. What we collect

Account and workspace data

Name, email, hashed password (or your Google sign-in), workspace names and memberships, IP address, browser and device information, subscription and billing data, usage logs, and support conversations.

Project data

The brand and website you track, the prompts you create, competitors, tags, countries, and the AI-engine answers and metrics we collect for you. During onboarding we fetch and analyze the public website you point us at.

What we do not collect: FameScan asks public AI engines questions about brands and markets. That data is about brands, not people — we do not scan your customers or their personal data.

3. Why we process it

  • To run and improve the platform.
  • To run your tracked prompts and compute your visibility metrics.
  • To keep the service secure and reliable.
  • To handle subscriptions and payments.
  • To meet legal and accounting obligations.
  • To provide onboarding, support and service notifications.

4. Legal basis

  • Performance of our contract with you.
  • Our legitimate interests, such as analytics, security and product development.
  • Legal obligations, such as accounting.
  • Your consent, where the law requires it (for example cookies or marketing).

5. Who we share it with

We never sell or rent personal data. We share the minimum needed with trusted subprocessors that help us run the service:

  • Hostinger – hosting, infrastructure and storage.
  • Stripe – billing and payments for subscriptions purchased directly from FameScan. Card details go directly to Stripe and never touch our servers.
  • AI engine providers (such as OpenAI, Perplexity, Google and Anthropic) – they receive the text of the prompts you track so we can measure their answers, nothing more.
  • Google – sign-in with Google, if you choose it.
  • Wix – installation identity, site metadata, setup status and Wix-managed subscription lifecycle, only if you install FameScan through the Wix App Market. FameScan receives the Wix site owner email to create and own the installation workspace.

We may change subprocessors, as long as they meet FADP and GDPR requirements and sign the appropriate agreements (DPAs and, where relevant, SCCs).

6. How long we keep it

We keep personal data only as long as needed for the purposes above, including legal compliance and dispute resolution. Some data may be kept after an account is closed where the law requires it.

7. How we protect it

  • Encryption of data in transit and at rest.
  • Access controls and activity logging.
  • Workspace isolation: your data is only visible to your workspace members.
  • Passwords stored only as strong hashes.

If a data breach occurs, we notify affected users as required by law.

8. Your rights

Under the GDPR and FADP you can:

  • Access and correct your data.
  • Request deletion, restriction or portability.
  • Object to certain processing.
  • Withdraw consent where processing is based on it.

Reach us any time at Help Center.

9. Cookies

With your consent, Google Ads measures whether an ad leads to a started or completed check, registration, checkout, confirmed trial or payment. We load the Google tag only after you accept marketing measurement. Click identifiers and first-party advertising cookies connect our website and portal; consent lasts up to 90 days. Payment events contain only a pseudonymous transaction identifier, amount and currency. We do not enable enhanced conversions or personalized Google advertising and do not send your email, submitted websites, brand profiles, questions or answers to Google. You can withdraw consent in Privacy settings. Learn how Google uses this data.

Necessary storage supports login, security and your temporary free check. Anonymous checks expire after 24 hours unless their results are transferred to your verified account. With your optional marketing consent, we use Meta Pixel and the Conversions API for ad measurement and retargeting. Meta receives page and funnel events, browser/click identifiers and, for confirmed trials, IP address and browser information. We do not send submitted websites, brand profiles, questions, answers or email addresses as advertising event data. Consent and advertising identifiers are stored for up to 90 days across our website and portal. You can reject or withdraw consent using “Privacy settings”. The service remains available without marketing consent. See Meta’s privacy policy.

Separately, we count public website page views by day and page. These aggregate counters contain no visitor IDs, cookies, IP addresses, referrers or query parameters. They are not sent to Meta and do not track people across visits.

10. International transfers

Your data may be processed outside Switzerland or the EU by our subprocessors — the AI engine providers in particular are US companies. Where that happens, we rely on appropriate safeguards such as DPAs and Standard Contractual Clauses.

11. Updates

We may update this policy from time to time. For material changes we will notify you by email or in the platform, so it is worth checking back now and then.

12. Contact