Privacy & Security Policy

1 Data We Collect

We collect only the minimum information necessary to authenticate your account, fulfill your subscription, provide customer support, and deliver accurate keyword alerts:

2 Data Storage, Browser Processing & Sharing

• Zero Social Account Storage: We do NOT store, access, view, or transfer your social media login credentials, private keys, or session tokens to any external server in any form.
• Ephemeral Browser Caching: Public social media posts and community discussions permitted to your account are temporarily scanned locally within your browser with the sole purpose of detecting configured keywords. This cached data is automatically deleted after 30 days to strictly honor the privacy standards, rate limits, and terms of each social network.
• Keyword Configuration: We securely store only the search keywords, negative filter terms, and AI outreach prompts you explicitly configure, solely to match posts and send you instant lead notifications.
• Aggregated Metrics: Aggregated, non-personally identifiable usage statistics may be shared with trusted operational infrastructure partners to maintain 99.9% platform uptime and detect anomalies.

3 Credit Card Safety & Payment Security

3.1 Direct PCI-DSS Handshake: When you purchase or manage a subscription on MediaScan, no cardholder details touch our servers. Payment processing is completely offloaded to Stripe Inc. (https://stripe.com), an audited PCI Service Provider Level 1 certified entity ensuring military-grade AES-256 financial data encryption.

3.2 Secure Network Transmission: All data transmissions between your browser and our application are encrypted with 256-bit SSL / TLS 1.3 certificates. We employ defense-in-depth protocols to maintain rigorous security across our entire technology stack.

4 Our Authorized Sub-Processors & GDPR Compliance

To ensure strict compliance with the General Data Protection Regulation (GDPR) and international privacy laws, all external sub-processors undergo security audits and maintain signed Article 28 Data Processing Agreements (DPA) featuring Standard Contractual Clauses (SCCs):

5 Permitted Disclosures & Strict Non-Sale Pledge

5.1 Permitted Operational Disclosures: We may share personal data strictly with trusted service providers who assist us with hosting, infrastructure maintenance, email delivery, billing, and customer support under confidentiality agreements.

5.2 Legal Compliance: We may disclose data when required by valid court order, subpoena, or statutory regulatory directive, or when necessary to protect the legal rights and safety of MediaScan, our users, or the general public.

6 Network Security & Infrastructure Safeguards

6.1 Encrypted Channels: All communication between client devices and our cloud backend is strictly enforced via HTTPS utilizing modern TLS 1.3 cryptographic suites with perfect forward secrecy.

6.2 Continuous Monitoring: We actively log and monitor network access, firewall states, and virtual machine integrity to protect against unauthorized intrusions and zero-day vulnerabilities.

7 Account Security & User Responsibilities

You are responsible for safeguarding your login credentials and preventing unauthorized access to your account. If you become aware of any suspected compromise, unauthorized access, or credential exposure, you must notify our security team immediately at support@mediascan.net.

8 Electronic Communications Privacy Act Notice & Disclaimer

9 Updates to This Policy

MediaScan reserves the right to amend this Policy to reflect enhancements in technology, service capabilities, or regulatory mandates. When updates occur, we will update the “Last updated” timestamp at the top of this document. Continued usage of our services following revisions constitutes acceptance of the modified Privacy Policy.