Privacy policy
What we store, why, who else sees it, and how to get rid of it.
Updated 11 October 2026
What we store
- Your account. Your name, the email address you sign in with, your password stored only as a one-way hash, and your credit balance.
- Your conversations. The messages you send and the technician's replies, kept so you can come back to a repair later.
- Files you send. Photos and PDFs you upload, and any marked-up versions the technician produces from them.
- Your notes. Notes you write, and replies you save into them.
- Voice notes. Turned into text on our own server. The recording itself isn't kept.
- Your ledger. What each reply cost, top-ups and refunds.
- Operational records. Logs of runs and errors, so we can tell when something broke and refund you for it.
- Page visits. Which pages of this site are looked at, under an id that lasts only as long as the browser tab, with a rough location (country and city) worked out from the visitor's IP address. The address itself isn't kept.
We don't run advertising, we don't have tracking pixels, and we don't sell or share your data with anyone for marketing.
Why, and on what legal basis
We process your data to provide the service you've asked for — that's performance of a contract. Keeping accounting records is a legal obligation. Keeping error logs and preventing abuse is our legitimate interest in running the thing reliably.
Who else sees it
- Anthropic — your messages and files are sent to Anthropic's API, which is the AI that answers you. Under their commercial terms your content is not used to train their models.
- OVHcloud — our server, in Canada. The website runs there, and your account, conversations, notes and files are stored there.
- Stripe — payments. Card details go straight to Stripe; we never see or hold them.
- Google — only if you choose Continue with Google: Google confirms who you are and gives us your name and email address.
- Apple (iCloud Mail) — sends our emails: confirming your address, password resets and receipts.
- GeoJS — turns a visitor's IP address into a country and city for the page-visit records above.
Your data is stored in Canada, which the UK recognises as protecting personal data adequately. Where a provider processes it elsewhere (Anthropic and Stripe in the United States, for example), it's covered by the standard safeguards those providers operate under.
How long we keep it
Conversations and files stay until you delete them or ask us to close your account. Transaction records are kept for six years because tax law requires it. Operational logs are kept for a short period and then age out.
Your rights
You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. You can object to processing or ask us to restrict it. Email info@scatto.io and we'll deal with it — no forms.
If you think we've handled your data badly, you can complain to the Information Commissioner's Office at ico.org.uk. We'd rather you told us first so we can fix it.
Cookies
We use what's needed to keep you signed in and to remember your settings. There are no advertising or analytics cookies.
Children
Scatto isn't intended for under-16s and we don't knowingly hold their data.
Contact
Data protection questions, access requests, deletions: info@scatto.io. See also our terms of service.