Privacy policy

01The short version

Tenvia is a product of Mosco Holdings LLC, which is the data controller for everything described here.

We collect the website address you ask us to scan, the email address you give us, and ordinary analytics about how this site is used. We do not sell any of it, and we do not run advertising trackers.

02What we collect, and why

When you run a free scan we store the URL you entered and the results we produced for it, so the report has somewhere to live and so a repeat scan can be compared against the last one.

If you ask for the full report or place an order we store the email address you give us, along with the order and its status. We need it to send you the thing you asked for and to raise an invoice.

Our servers keep ordinary request logs — IP address, timestamp, path — for a short period, which is how rate limiting works and how we diagnose faults.

• Scanned URL and the findings for it.
• Email address, where you provided one.
• Order records: what was bought, when, and whether it has been paid.
• Request logs and product analytics events.

03What we do not collect

We do not ask for card details and never see them — payment happens on Stripe's own hosted invoice page. We do not place advertising or cross-site tracking cookies. We do not buy contact data about you from anyone.

04Scanning your site

A scan requests pages from the site you nominate, in the same way a browser or search engine crawler does, and reads the HTML and CSS that comes back. It reads what is publicly served. It does not attempt to log in, submit forms, place orders or alter anything.

Scanning is limited to the domain you enter and a bounded number of pages on it.

05Analytics

We use PostHog for product analytics — which pages are visited, which get abandoned, whether the scan form is being completed. It is configured to record usage, not to build advertising profiles, and the data is not shared with ad networks.

If your browser sends a Do Not Track or Global Privacy Control signal we respect it. You can also block the analytics script outright without affecting any part of the site: scans, reports and orders all work regardless.

06Who else processes your data

We keep the list of processors short and name all of them:

• Stripe — invoicing and payment. Stripe receives your email address and the invoice details.
• Cloudflare — DNS, and outbound email delivery for the reports and notices we send you.
• PostHog — product analytics for this website.
• Our hosting provider — runs the application and its database.

07Email you receive from us

We email you the things you asked for: your report, your invoice, and — if you have monitoring — the alerts it produces. Every one of those carries a one-click unsubscribe link that works without logging in.

We do not add you to a marketing list because you ran a free scan.

08How long we keep it

Scan results and the email address attached to them are kept while they are useful to you and deleted on request. Order and invoice records are kept for as long as tax and accounting rules require, which is typically several years. Request logs are kept for a short period and then rotate away.

09Your rights

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email the address below and we will action it — there is no form and no account to log into. If you are in the UK or EU you also have the right to complain to your data protection authority.

10Cookies

This site sets no advertising cookies. PostHog sets a first-party cookie to tell repeat visits apart; blocking it degrades nothing you can see.

11Contact

Data questions and deletion requests go to help@tenvia.mosco.holdings, and a person answers them.