Privacy policy
Your reviews, your conversations and your data remain yours. Here is what we do with them, and what we don’t.
What we collect
Your account information (name, email, business), the reviews and messages received through the channels you connect, the content you publish, and platform usage data. Your customers who use the NFC plate do not create an account: only their rating and any message they leave are transmitted. When the plate is scanned, we record the country, device type, browser and operating system, never the IP address; the browser’s technical details and the referring page are erased after 90 days. On the home page, the currency and the languages offered depend on the country you connect from, which is detected but never stored.
Why we use it
To run the service: bringing your conversations together in one place, preparing replies and posts, and measuring your visibility. We do not use your data for advertising, and we do not sell it.
AI and your data
ORA works from your own reviews, messages and tone of voice. Your data is not used to train third-party models. Every reply and every post awaits your approval, unless you turn on automation module by module.
Where and for how long
Your data is hosted and encrypted within the European Union. It is kept for the duration of your subscription, then deleted within [30] days of its end, unless the law requires otherwise. We keep the IP address you connect from in our technical logs for 30 days, for the security of the service. Technical error reports do not contain IP addresses. Database backups, which are used only to restore the service, keep these addresses longer, for their own retention period: up to 35 days for continuous backups and one year for daily backups, after which they are deleted.
Who we share it with
We do not sell or rent your data. Only the providers that run the service receive it, each solely for its own task: — Hosting and network: OVH (servers in France); Cloudflare (traffic routing and security, internal access, storage of media and backups). — Artificial intelligence, when ORA works for you: Anthropic, OpenAI, Google (Gemini), Mistral AI and Groq receive the text the task needs (reviews, your customers’ messages, your instructions); Runway, Stability AI, fal.ai, Replicate and Meshy receive the instruction and, where relevant, the image to transform. Only enabled providers are called. — Email: SendGrid (Twilio), for invitations, sign-in codes and notifications. — Payment: Stripe (email address, amount). — Notifications: Expo for the mobile app; your browser’s notification service (Google, Apple or Mozilla) for the dashboard. — Error reports: Sentry, without IP addresses or cookies. — The platforms you connect, through official connections you can revoke at any time: Google (Business Profile, Sign in with Google), Meta (Facebook, Instagram, Messenger, WhatsApp), TikTok and Snapchat; and public reviews read from Yelp, Trustpilot and Tripadvisor. — Embedded content: the Google Fonts of your public page, loaded by your visitors’ browsers; the site’s presentation video (YouTube), only if you play it. Several of these providers process data outside the European Union, notably in the United States. No other third party receives it.
Your rights
Access, rectification, export, deletion, objection: from your account settings or by email to support@scani.net. A full export of your data is available in one click, at any time.
Cookies
The site only uses cookies that are necessary for it to work, along with anonymised audience measurement. No advertising cookies.