Privacy Policy

This text is a translation. The Spanish version is legally binding.

In short: the site intentscanner.app has no forms, sets no tracking cookies and collects no data about you until you write to us yourself. The full version is below.

1. Who is responsible for processing the data.

Anatolí Garmashov Dachkin, NIF 61690501Q, Avenida de la Vega, 61-2, 33940 San Martín del Rey Aurelio (Asturias), Spain, email [email protected] (hereinafter “we”).

2. What data we process and where it comes from.

• Enquiries. If you write to us on Telegram, WhatsApp or by email, we receive what you send: a name or username, a contact, the text of the message. The source of the data is you yourself.
• Visiting the site. We use analytics without cookies and without identifying individuals: anonymised events are counted (page view, country, device type). You cannot be identified from them. Technical server logs (IP address, time of request) are kept for up to 30 days and are used only for security and for diagnosing faults.

3. Why and on what basis.

• To answer your enquiry, show you example signals and agree the setup – on the basis of pre-contractual measures taken at your request (art. 6.1.b GDPR).
• To keep the site running and secure – on the basis of legitimate interest (art. 6.1.f GDPR).
• To perform the contract and keep records if you become a client – art. 6.1.b and 6.1.c GDPR.

There are no marketing mailings: we do not write first and we do not add you to any lists.

4. How long we keep it.

Correspondence about an enquiry – for as long as the exchange lasts and a reasonable period after it; contract and accounting data – for the periods set by Spanish tax law; server logs – up to 30 days.

5. Who we pass it to. List of providers.

We sell it to no one and pass it to no one for advertising. The full list of providers involved in the operation of the site and the service (processors for the site's own data; sub-processors where we act as processor for a client):

• Hosting – a server in Germany (EU). Storage and delivery of the site, operation of the scanner.
• Cloudflare, Inc. (USA) – protection and delivery of the site, anonymised visit statistics without cookies. Certified under the EU-U.S. Data Privacy Framework.
• OpenAI, L.L.C. (USA) – analysis of intent in the text of the message via API. The transfer is made on the basis of a Data Processing Agreement and the European Commission's Standard Contractual Clauses (Implementing Decision (EU) 2021/914). Only the text of the message is passed, and less than 1% of the flow reaches the language model; this data is not used to train models.
• Telegram FZ-LLC – the channel through which signals are delivered to your private group, and the channel of your enquiry to us.
• Meta Platforms Ireland Ltd. (WhatsApp) – the channel of your enquiry to us, if you write there.
• Paddle.com Market Ltd. (United Kingdom) – merchant of record and payment provider for card subscriptions: order handling, billing and payment data, invoicing and VAT reporting. Card details are handled by Paddle and never reach us. The transfer outside the EU is made under the European Commission's standard contractual clauses (decision 2021/914).

The list is published on this page and is updated whenever a provider changes.

6. Your rights.

You can request access to your data, its rectification, erasure, restriction of processing and portability, and you can object to processing: write to [email protected]. If you consider that your rights have been infringed, you have the right to lodge a complaint with the Spanish supervisory authority, the AEPD (aepd.es), or with the supervisory authority of your country of residence.

7. About data in the operation of the service.

The Intentscanner service reads public Telegram chats that the client's account is a member of, selects messages containing requests for services and forwards them to the client. Messages are not retained after delivery; processing takes place on servers in the EU; the service publishes nothing. The legal basis for this processing is the legitimate interest of the client and of Intentscanner in connecting a service provider with a person who is publicly looking for that service (art. 6.1.f GDPR), supported by a documented Legitimate Interests Assessment (LIA). The GDPR roles in respect of this data (the client is the controller, Intentscanner is the processor) are fixed in the contract with the client. The service takes no automated decisions producing legal effects for individuals.

8. Changes.

When the policy changes, the new version is published on this page with the date of the update.

Version date: 29 August 2026.