Privacy — ZARN

What we store

Your account information (name, email, organisation).
Scan inputs you submit: pasted text, URLs you scan, and images you upload.
Content extracted from URLs you scan (via a third-party fetching service — see Data & AI handling).
Risk findings, mitigations, reports and audit logs.
Credit balances and credit transactions.

Why we store it

To run the product, allow you to revisit findings and reports, support pilot review and improvement, and meet auditability requirements.

Who can see your data

You and members of your organisation with appropriate access.
The configured AI provider receives scan content for analysis (see Data & AI handling).
Public webpage content is fetched via a third-party fetching service.
ZARN super-admin staff may access scan content only for legitimate operational reasons. Such access is reason-gated and logged in an immutable access log.

EXIF and image metadata

Uploaded images are checked for embedded metadata, including EXIF and GPS where present. If you do not want this metadata to be processed, strip it from the image before uploading.

Your responsibilities

Only upload or scan content you are authorised to assess. Do not upload personal data of third parties without a lawful basis.

Retention

Pilot data is retained for the duration of the pilot. Deletion on request can be arranged via your pilot point of contact.

ZARN LTD is a private limited company registered in England and Wales under company number 16431762. Registered office: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.