Privacy Policy

Last updated: May 8, 2026

1. Who we are

This Privacy Notice explains how Akil Jolly, trading as ScanMy("ScanMy", "we", "us", "our"), collects, uses, shares, and protects your personal data when you use the ScanMy website, smart QR signs, and related services (the "Service"). Akil Jolly is the data controller of personal data processed in connection with the Service.

2. Personal data we collect

  • Account data — name, email, password (hashed), and account preferences.
  • Listing data — property details, images, descriptions, and contact details you publish.
  • Sign activation data — sign UID, activation code, timestamp, and the listing it creates.
  • Communications — emails and support messages you send us.
  • Usage and device data — IP address, browser type, device identifiers, pages viewed, and QR scan events (which are aggregated for analytics).
  • Cookies and similar technologies — see section 8 below.

3. How we use your data and legal bases

  • Provide the Service (account creation, sign activation, listing publishing) — necessary to perform our contract with you.
  • Process payments via Paddle as Merchant of Record — necessary to perform our contract.
  • Customer support — necessary to perform our contract and our legitimate interest in helping users.
  • Security, fraud prevention, and abuse detection — our legitimate interest in keeping the Service safe.
  • Service improvement and aggregated analytics — our legitimate interest in improving the product.
  • Marketing communications (where applicable) — your consent, which you can withdraw at any time.
  • Legal and compliance obligations — to comply with applicable law.

4. Who we share data with

We do not sell your personal data. We share it only with the following categories of recipients:

  • Paddle — our Merchant of Record for the sale of subscriptions and physical signs. Paddle handles payment processing, subscription management, tax compliance, invoicing, refunds, and related customer service. See Paddle's privacy policy at paddle.com/legal/privacy.
  • Hosting and infrastructure providers — to host the Service and store data securely.
  • Email and communications providers — to send transactional and account emails.
  • Analytics providers — to understand aggregated usage of the Service.
  • Professional advisers — accountants and lawyers, where reasonably necessary.
  • Authorities — where required by law, court order, or to protect our rights.

5. International transfers

Your data may be processed in countries outside your country of residence, including by Paddle and our infrastructure providers. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions to protect your data.

6. Data retention

We keep personal data only for as long as we need it to provide the Service, comply with legal obligations (such as tax and accounting requirements), resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymise it. Account data is generally deleted within a reasonable period after account closure unless retention is required by law.

7. Your rights

Depending on where you live, you may have the following rights:

  • Access to a copy of the personal data we hold about you;
  • Rectification of inaccurate or incomplete data;
  • Erasure ("right to be forgotten") in certain circumstances;
  • Restriction of, or objection to, certain processing;
  • Data portability for data you provided to us;
  • Withdrawal of consent where processing is based on consent;
  • To lodge a complaint with your local data protection authority.

To exercise any of these rights, email privacy@scanmyhomes.com. We will respond within the time required by applicable law (typically within one month under GDPR).

8. Cookies

We use essential cookies needed to operate the Service (for example, to keep you signed in) and a limited set of analytics cookies to understand aggregate usage. You can manage cookie preferences in your browser settings. Disabling essential cookies may prevent parts of the Service from working.

9. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS), hashed passwords, role-based access controls, and row-level security on the database. No system is perfectly secure, but we work to keep your data safe.

10. Changes to this notice

We may update this Privacy Notice from time to time. Material changes will be communicated through the Service or by email. The "Last updated" date at the top of this page reflects the latest revision.

11. Contact

For privacy questions or requests, contact Akil Jolly at privacy@scanmyhomes.com.