Legal
Privacy Policy
Effective 14 October 2026 · Version v2-2026-10-14
Scanix is operated by Sam M, trading as Scanix Solutions (ABN 66 834 759 267) ("Scanix", "I", "we"). This policy explains how I handle personal information when you visit the Scanix website, create or use an account, pay for a subscription, use the desktop app, submit a plan for AI-assisted reading, save a report, or contact me. Scanix is intended for business and trade users and isn't directed to children under 18.
Plan documents can contain personal information about people other than the account holder — names, addresses, or property details. Only upload plans you're authorised to use, and remove anything that isn't needed for the order list. I don't sell personal information or use it for third-party targeted advertising.
1. Information I collect
- Account and team: email address, display name, account role, team membership, and invited teammate email addresses. Supabase Auth handles password authentication; Scanix does not save your password.
- Subscription and billing: selected plan, subscription status, Stripe customer and subscription references, payment status, and transaction metadata. Stripe receives your card details directly; Scanix never sees or stores a full card number or security code.
- Plans and reports: plan pages submitted for scanning, optional project name, extracted items and quantities, review flags, the generated report PDF, preparer/team member, and scan or report timestamps. If a scan is flagged for checking, this also includes marked-up images of the plan pages (see section 3). If you edit a quantity, a record of that correction is kept (see section 3).
- Usage and support: which scans were run, when, and by whom; quota use; fault or security information needed to run the service; and anything included in support messages.
- Website and device: IP address, browser or device type, operating system, referring page, and similar request data collected by the website, its hosting/CDN, and its authentication and payment providers.
- Stored on your device: remembered email, Supabase refresh token, licence reference, app settings, and local report files.
2. How I use it
- To create and secure accounts, maintain sessions, manage team invitations, and show account roles.
- To process plan pages, produce draft item lists, and generate downloadable reports.
- To save and retrieve cloud reports and track the account's shared plan-scan allowance.
- To start and administer subscriptions, verify payment status, and keep financial records.
- To send essential account, security, billing, and service messages.
- To send product news or offers, where you've consented or the law otherwise permits.
- To provide support, diagnose faults, prevent misuse, and protect the service.
- To comply with the law and establish, exercise, or defend legal claims.
If you don't provide required account, payment, or plan information, some features won't work.
3. Plan documents, AI processing, and reports
Scanix cross-checks its plan analysis using three AI readers. Relevant plan pages can be read again when further checking is needed. They are sent through Scanix's server-side proxy to Anthropic's Claude API, which keeps Scanix's provider credential off your device and meters the scan against your account.
Your original source PDF or image file stays on your device and is not added to Scanix's saved-report store. Scanix separately stores reports, flagged review images, correction records and account rule documents, as described below. Anthropic's published commercial API terms generally describe automatic deletion of submitted content within 30 days for standard use, subject to Anthropic's own exceptions and any separately configured retention.
Flagged scans. When a finished scan is flagged for checking (for example, a flag, a doubt about whether the result is right, or an unknown symbol), the desktop app also draws a marked-up image of each electrical plan page and uploads it to a private Scanix storage area so I can review it against that scan. A clean scan does not upload these images. They show the plan page itself, so they may include any names, addresses, or property details on it. Access is restricted to Scanix administration through short-lived links. I try to remove the images when I mark the scan as reviewed; images from unreviewed scans do not expire automatically.
Corrections and rule documents. If you change a quantity in a result, Scanix keeps a correction record (the item, original and new quantity, project name, app version, and the rules that applied to that scan). Ordinary app controls cannot edit or delete these records; the managed account-deletion process described in section 9 can remove them. Separately, Scanix stores any custom knowledge-base or rule documents set up for your account in private storage. These can contain information drawn from your plans or business, and they are held separately from your saved reports.
Reports are saved to your computer when you generate them. If you're signed in, a copy of the report and its details may also be uploaded to your account in Scanix's private report storage. The account owner can see business-wide reports; workers can see only reports they generated.
4. Who receives information
I disclose information only as needed to operate Scanix, process payments, support users, protect the service, or comply with the law. The main recipients are:
- Anthropic — AI reading of relevant plan pages and generation of the extracted item list. Anthropic may process this information in the United States and other locations used by its subprocessors.
- Supabase — account authentication, database hosting, team data, usage records, session handling, and cloud report storage. Primary project region is ap-southeast-2 (Sydney, Australia).
- Stripe — payment processing, subscription administration, and fraud prevention.
- Netlify and jsDelivr — website hosting/delivery and delivery of the Supabase browser library, including standard security and request logging.
- Google (Google Fonts) — when you open these website pages, your browser requests font files directly from fonts.googleapis.com and fonts.gstatic.com, so Google receives your IP address and standard browser request details. Google's own policies apply to that data.
I may also disclose information to professional advisers bound by confidentiality, a regulator or authority where required or authorised by law, or a successor in a genuine business sale or restructure, subject to appropriate safeguards. Where the information goes to an overseas recipient, I take reasonable steps appropriate to the circumstances before disclosing it.
5. Marketing communications
I may use your name, email address, and customer relationship information to send product news, feature announcements, and offers where you've given consent or the law otherwise permits. Every commercial message identifies Scanix, gives current contact details, and includes a clear way to unsubscribe. A minimal suppression record may be kept after you opt out, so I don't contact that address again.
6. Website technology and local app data
The website is hosted on Netlify and loads Supabase functionality for account sign-in. Supabase may use browser storage to maintain your signed-in session. A signed-in customer managing an existing subscription is sent to Stripe's own secure billing portal, which may use cookies or similar storage there to process payments and reduce fraud. The website does not intentionally add advertising trackers or behavioural analytics, though the providers above may collect technical information for their own service, security, and compliance purposes. Blocking browser storage or provider scripts may prevent sign-in or billing management from working.
The desktop app stores settings and a remembered login session locally on your Windows device. Protect your Windows account and device, and clear the app's local data before handing the computer to anyone else. A signed-in subscription's managed licence key is session-only and is not written to disk.
7. How long I keep information
- Source plan files aren't added to Scanix's saved-report store after a scan.
- Marked-up plan images from flagged scans are kept until I mark the scan reviewed, at which point they are removed. There is no automatic expiry for a flagged scan that is never reviewed, and removal of an image is not guaranteed if the clean-up step fails.
- Cloud reports and line items are kept while your account is active.
- Correction records and custom knowledge-base or rule documents are kept in Scanix's systems and are not removed automatically.
- Account, team, and usage data is kept while needed to run your account, administer billing and quotas, secure the service, and resolve disputes.
- Payment information is kept by Stripe under its own policy; Scanix keeps limited subscription and transaction references for as long as needed for service and financial records.
- Local device data stays on your device until you delete local reports or app data — removing your online account doesn't automatically remove files or credentials stored on a device.
- Website and provider logs are kept by the relevant hosting, CDN, authentication, and payment provider under its own retention schedule.
8. Security and data breaches
Scanix uses third-party authentication and password hashing through Supabase Auth, account-scoped access controls, and encrypted network connections. No internet or storage system can be guaranteed completely secure. You're responsible for protecting your device, account password, and email account — tell me promptly if you suspect unauthorised access. If a data breach occurs, I'll assess it and notify affected people and regulators where required by law.
9. Your rights
You can ask me to access or correct personal information held about you, request deletion of your account and cloud reports, unsubscribe from marketing, or ask how your information was handled. Contact ScanixAUS@outlook.com. I may need to verify your identity and may refuse or limit a request where the law permits, and I'll explain why if so.
Account deletion is carried out by me on request after billing and account activity have been stopped. The managed process covers the account record, saved reports, usage and correction records, custom knowledge-base files and logos, account-specific rule documents, flagged-scan images, licence and subscription records, profiles, and logins. I retain a deletion record (the account email, date, who carried it out, and counts of what was removed) and a job record used to track completion. If a step fails, the process records its progress so I can retry it; a failed request is not confirmation that deletion has finished. Uploads still in progress can need further cleanup, so I verify completion and cannot promise that every related record has been removed merely because a request was submitted.
Deleting Scanix-held data doesn't automatically delete information already processed or retained by Anthropic, Stripe, Supabase, Netlify, or other providers under their own retention rules. It also doesn't remove local files or remembered sessions already stored on a device.
10. Privacy complaints
Send a privacy complaint to ScanixAUS@outlook.com with enough detail for me to understand the issue, and I'll acknowledge and look into it within a reasonable timeframe. If you're not satisfied with my response and Australian privacy law applies, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
11. Changes to this policy
I may update this policy as the product, providers, or legal requirements change. The current version is always published here with a revised last-updated date, and I'll give reasonable notice of material changes where appropriate.
12. Contact
- Operator: Sam M, trading as Scanix Solutions (ABN 66 834 759 267)
- Privacy email: ScanixAUS@outlook.com
- Business region: South East Queensland, Australia