Privacy policy
Last updated 2026-09-28
Who this covers
This is Counter's own policy, covering this website, the free scanner, and the connectors Counter operates on behalf of businesses. Each connector also publishes its own policy on its own address, describing that business's data specifically.
If you run a scan
We keep the address you submitted, the report we produced, and the email address if you chose to give one. We store a hash of your network address rather than the address itself, which is enough to enforce the rate limit and not enough to identify you. We scan only what is reachable from the public internet, and we do not sign in to anything.
If you become a customer
We keep the contact details you give us, the definition of your connector, and our correspondence. Billing runs through Stripe: Counter never sees or stores a card number, and never handles a payment itself.
Calls through a connector we operate
For each call we record the tool that was called, the arguments the agent sent, a hashed identity of the calling agent, the time, the outcome, and any approval decision made by the business. Arguments are kept for the duration of the request and for 30 days in the logs.
What is never accepted or stored
Card numbers, passwords and login credentials are never accepted by a Counter tool and are never stored. A tool that needs a payment returns a Stripe Checkout link instead.
Who processes it
Counter, running on Cloudflare's network; Stripe for payments; Twilio for the WhatsApp messages that carry approvals; and the business's own systems that fulfil a request. AI assistants that call a connector receive the results and handle them under their own terms. There are no analytics scripts, no advertising scripts and no cookies on this website.
How long we keep it
- Call logs: 30 days.
- Approval records: 90 days.
- Scan reports and the email you gave with a scan: until you ask us to delete them.
- Access tokens a business connected: until the business disconnects.
- Customer records and correspondence: for as long as we work together, and afterwards only as long as the law requires.
Your choices
Ask us to delete a scan, a report, or the email address attached to one, and we will. If a connector holds something about you as a customer of the business it belongs to, the business controls that data and can ask us to remove it.