Chrono Scan Privacy Policy

Effective date: July 22, 2026
Who we are: Chrono Consulting Group ("Chrono", "we", "us"), PO Box 314, Deer Park, NY 11729.
Privacy contact: info@chronocg.com

1. Scope

This policy applies to Chrono Scan, the free outside-in read of a business available at scan.chrono-os.com, and to the emails we send in connection with it. It explains what we collect from the person who submits a scan, how we use it, and your choices. In this policy, "read" and "report" mean the same generated output.

This policy governs the personal information of the person who submits a scan. It does not treat the businesses whose public information we analyze as our customers. Those reads are built entirely from publicly available data, accessed without logging in, and without bypassing any paywall, login, or captcha. If you operate a business and do not want us to generate or host a read about it, Section 11 explains how to opt out or request removal.

2. Information we collect

From you (the submitter):

• The email address you provide (required to receive your read), and an optional phone number.
• The website you ask us to read.
• Your newsletter preference, if you opt in to the Chrono Log.

About the business you enter (public data only):

• Public website content, offers and pricing, public customer reviews, public social profiles, public advertising libraries, and search visibility. We collect the signals we derive from this public data. We do not build a permanent archive of third parties' full copyrighted text.

Automatically:

• Standard technical data such as IP address, browser type, and timestamps, used to operate the service and prevent abuse. If the landing page captures UTM or referral parameters, we store them with your submission.

3. How we use your information

• To generate your free read and host it at a private, unguessable link.
• To email you your report, and, if you opt in, the Chrono Log newsletter.
• To operate, secure, debug, and prevent abuse of the service.
• To improve the service. We may use de-identified and aggregated signals derived from scans (signals that are not tied to you or used to contact you) to improve, and over time to train, the models that read businesses. We do not sell this data, and we do not use it to build a public profile of any individual.

4. Retention

Two things here have two different lifespans. The publicly viewable report link expires 30 days after we generate it, or sooner if we remove it. Separately, we keep the underlying submission record (your email, any phone number, the site you entered, and the read we generated) internally for as long as needed to operate the service and to send you material you asked for, and in no case longer than 24 months after your last interaction with us, unless a longer period is required by law or you ask us to keep sending you the Chrono Log. After that we delete or de-identify it.

De-identified and aggregated signals used to improve the engine, which are not linked to you and cannot be used to contact or identify you, may be kept for longer. You may request deletion of your personal information at any time (see Section 7).

5. How we share it, and that we do not sell or share it

We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising, as those terms are defined under California law. We disclose information only to service providers ("subprocessors") that help us run the product, and only as needed:

• Supabase: data storage and backend.
• Resend: outbound email delivery.
• Cloudflare: bot protection (the submission captcha) and infrastructure.
• Vercel and Lovable: landing-page hosting.
• Anthropic: the AI models that analyze the public business data to produce the read.

We may also disclose information where required by law, or to protect our rights, our users, or the public.

6. Where your data is processed

We are based in the United States and process data in the United States. Chrono Scan is directed to businesses and users in the United States and Canada. It is not directed to individuals in the European Union, the EEA, or the United Kingdom, and we do not knowingly collect, process, or train on the personal data of individuals in those regions. If you contact us from outside the United States, you consent to your information being processed in the United States.

7. Your rights and choices

• Access and deletion. Request a copy of, or deletion of, your personal information by emailing info@chronocg.com. We acknowledge verified requests promptly and complete them within 30 days, or sooner where the law requires.
• Email opt-out. Every email includes a one-click unsubscribe and our physical mailing address. We honor opt-outs promptly.
• California (CCPA/CPRA) and other US state privacy laws. Depending on where you live, you may have rights to know, access, delete, and correct your personal information, and to opt out of the "sale" or "sharing" of it (we do neither). We honor these through the contact above and will not discriminate against you for exercising them.

8. Cookies and tracking

The scan landing page uses Cloudflare Turnstile for bot protection, captures basic first-party product analytics (such as page and interaction events) and any UTM or referral parameters, and loads web fonts from Google, which receives your IP address as part of serving them. We do not use third-party cross-site advertising trackers, and we do not use cookies to build an advertising profile of you.

9. Security

We use reasonable technical and organizational measures to protect your information, including access controls and encryption in transit. No system is perfectly secure, and we cannot guarantee absolute security.

10. Data breach notification

If a security incident affects your personal information, we will notify you, and any regulators, without undue delay and as required by applicable law.

11. Businesses we analyze, and how to opt out or request removal

A read is built only from publicly available information about a business. We do not log in, and we do not bypass paywalls, logins, or captchas. A read is a set of outside-in hypotheses, not a statement of fact about a business's finances, conduct, or quality.

If you operate a business and you do not want us to generate a read about it, or you want an existing read removed, email info@chronocg.com. We will honor the request and add the domain to a do-not-scan list. Removing a read deletes both the hosted report and the underlying submission record for that business. If you believe a read about your business contains an error, tell us and we will review it and, where appropriate, correct or remove it.

12. Children

Chrono Scan is not directed to, and is not intended for, anyone under 18. We do not knowingly collect information from children.

13. Changes

We may update this policy from time to time. We will post the updated version with a new effective date and, where required by law, provide additional notice.

14. Contact

Questions or requests: info@chronocg.com, or Chrono Consulting Group, PO Box 314, Deer Park, NY 11729.