1. Who We Are

BullScan ("we", "us", "our") operates thebullscan.com, an AI-powered sales page trust analyzer. We are an independent service — not affiliated with ClickBank, WarriorPlus, JVZoo, or any platform we scan.

2. Information We Collect

We collect the following when you use BullScan:

• URLs you submit for scanning — stored temporarily in a server cache for up to 1 hour to prevent duplicate API calls
• IP address — used for rate limiting (3 free scans per 30-day window) and security. A one-way hash is used for the free-scan limiter and scan log identifier
• Browser rate-limit attributes — limited browser/device characteristics are combined and one-way hashed to help prevent free-scan abuse; BullScan does not store the raw fingerprint in the rate-limit file
• Email address and name — only if you subscribe to our mailing list or purchase a license
• License key and activation date — stored in our database for paid users
• Scan logs — hashed IP identifier, scanned hostname, timestamp, risk score, score-model version, cache status, and analysis mode. Retained for up to 30 days for security and abuse prevention

3. How We Use Your Information

• To provide the scan service and display risk scores
• To enforce rate limits and prevent abuse
• To deliver license keys and product access after purchase
• To send product updates if you subscribed (you can unsubscribe anytime)
• To improve our AI analysis and detection accuracy

4. Third-Party Services

BullScan uses the following third-party services:

• Google Gemini — relevant page content is sent to Google's Gemini API for the primary AI evidence analysis. Google's privacy policy applies.
• OpenAI — if the primary AI analysis cannot complete, relevant page content may be sent to OpenAI's API as a fallback. OpenAI's privacy policy applies: openai.com/privacy
• Google Safe Browsing API — URLs are checked against Google's threat database. Google's privacy policy applies
• ClickBank — payment processing. ClickBank's privacy policy applies. We do not store credit card information
• MailerLite — email delivery for subscribers and license key emails. MailerLite's privacy policy applies

5. Data We Do NOT Collect

• We do not collect credit card or payment information (handled entirely by ClickBank)
• We do not sell, rent, or share your personal data with third parties for marketing
• We do not use tracking pixels, behavioral advertising, or retargeting cookies
• We do not store the full fetched page content in the scan cache — the cache contains the submitted URL, resulting analysis fields, score, and technical metadata

6. Cookies and Rate-Limit Identifiers

BullScan uses a secure session cookie for session state and CSRF protection. Free users may also receive an anonymous bs_fid cookie, retained for up to one year, solely to help enforce the free-scan allowance across sessions. BullScan also derives one-way hashed rate-limit identifiers from the IP address, this anonymous cookie, and limited browser attributes. These identifiers are not used for advertising or cross-site tracking. No advertising cookies or third-party analytics cookies are used. You can disable cookies in your browser, but some features or free-scan eligibility checks may not work as intended.

7. Data Retention

• Scan cache: deleted automatically after 1 hour
• Free-scan rate-limit data: entries expire from eligibility calculations after 30 days; temporary limiter files may be removed later as part of server housekeeping
• Scan logs: retained for 30 days, then deleted
• License records: retained for the duration of your license plus 90 days
• Email subscribers: retained until you unsubscribe

8. Your Rights

You have the right to:

• Request a copy of any personal data we hold about you
• Request deletion of your data
• Unsubscribe from our mailing list at any time
• Object to processing of your data

To exercise these rights, contact us at: thebullscan.com/contact

9. Security

We use HTTPS encryption on all pages, CSRF tokens on all forms, rate limiting, honeypot protection, and hashed storage of sensitive identifiers. License keys are generated using SHA-256 hashing. No system is completely secure — if you discover a vulnerability, please contact us responsibly.

10. Children's Privacy

BullScan is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us.

11. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top will reflect changes. Continued use of BullScan after changes constitutes acceptance of the updated policy.

12. Contact

For privacy concerns or data requests: thebullscan.com/contact
Website: thebullscan.com