Privacy policy

This policy explains what personal data KlearKomply processes, why, for how long, and what rights you have. We designed the service to keep as little as possible: website content is processed in memory and discarded, and we keep only structured findings for a limited period.

Who is responsible

The controller is I 4 U Services BV, Luikersteenweg 543B, 3800 Sint-Truiden, Belgium, enterprise number 0897.752.915. You can reach us at contact@klearkomply.com. Full company details are in our legal notice.

What we process and why

1. Scans you request

• The website address you enter and the resulting report: readiness states, findings, the URLs of affected pages and short, sanitized element examples (for example an opening HTML tag with long values and email addresses removed).
• Not stored: the full content of the pages we scan. Pages are fetched, analysed in memory and discarded within the same scan.
• Purpose and legal basis: providing the scan you asked for (performance of a contract, Art. 6(1)(b) GDPR).
• Retention: 30 days from the scan (or from the upgrade to a Full Readiness Scan), after which the report and its findings are deleted.

Reports are reachable only through a private link containing a long random token. We store only a cryptographic hash of that token. Anyone you share the link with can open the report, so share it with care.

2. Abuse prevention

To limit automated abuse, we store a one-way hash of your IP address combined with a salt that changes every day. It cannot be turned back into your IP address and is deleted with the scan after 30 days. Legal basis: our legitimate interest in keeping the service secure and available (Art. 6(1)(f) GDPR).

3. Payments

Payments for the Full Readiness Scan are handled by Floot Payments, the payment service of our hosting platform. Floot Payments uses Stripe as its underlying payment processor, so the secure checkout page you see is hosted by Stripe (checkout.stripe.com). Your card details, email address and billing information are entered there; we never see your card details. We receive and keep the order status, amount, currency, payment reference and the time you accepted our terms. We use the email address you enter at checkout once, to send you the private link to your report (with replies going to our support address); we do not copy it into our own database or use it for marketing. Legal bases: performance of a contract and our legal accounting obligations (Art. 6(1)(b) and (c) GDPR). Order records are kept for as long as Belgian accounting law requires.

4. Visiting our website

We use cookieless, privacy-friendly visitor statistics provided by our hosting platform. For each page view it records the page path, the referring site, browser type, browser language and an approximate country derived from your time zone. It does not record your IP address or the URL query string, and it stores nothing on your device: no cookies, no local storage. Legal basis: our legitimate interest in understanding how the site is used (Art. 6(1)(f) GDPR). See our cookie policy.

5. When you contact us

If you email us, we use your message and contact details to reply, and keep them only as long as needed to handle your request.

Websites we scan

Our crawler only requests publicly reachable pages, identifies itself as KlearKomplyBot, follows robots.txt rules for discovered pages and stays within strict page, time and size limits. Website owners who do not want their site scanned can block KlearKomplyBot in robots.txt or contact us.

Service providers

• Floot — application hosting, database, cookieless visitor statistics and payment handling (Floot Payments).
• Stripe — the payment processor behind Floot Payments, which hosts the checkout page. Stripe acts as an independent controller for some processing (for example fraud prevention) under its own privacy policy.

Where personal data is transferred outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework. We do not sell personal data and do not use it for advertising.

Your rights

You have the right to access, rectify and erase your personal data, to restrict or object to its processing, and to data portability. Because we cannot link reports to a person without the private link, please include the report link when you contact us about a specific report. You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données).

Changes

We will update this page when our processing changes, and adjust the date at the top.