GDPR Policy
How EmoScan approaches data protection, privacy and your rights under the General Data Protection Regulation.
Last updated: September 25, 2026
This GDPR Policy explains how EmoScan approaches the protection of personal data when the General Data Protection Regulation (GDPR) applies. It supplements our Privacy Policy and should be read together with our Cookie Policy.
1. Our privacy approach
EmoScan follows a data-minimization approach. We aim to process only the information necessary to provide and improve the service and to avoid creating unnecessary personal-data records.
EmoScan does not require an account to use its core analysis tools. Text and images submitted for analysis are processed to generate a result and are not written to an EmoScan user database or retained by EmoScan after processing.
2. Information that may be processed
Depending on how you use the website, information processed may include text or images you submit for analysis, basic technical information required to deliver and secure the website, language preferences stored in your browser, and analytics information about how the site is used.
You should not submit classified information, medical records, legal case files or other highly sensitive material that you would not want processed by an external AI service.
3. Lawful bases
Where GDPR applies, personal data is processed only where an appropriate lawful basis exists. Depending on the activity, this may include providing a service you requested, legitimate interests such as website security and product improvement, consent where required, or compliance with a legal obligation.
4. AI processing and service providers
Some EmoScan features require information you submit to be sent to an AI service provider in order to generate the requested analysis. EmoScan also relies on infrastructure and analytics providers required to operate, secure and improve the website.
Service providers are used only for their relevant operational purpose. EmoScan does not sell personal data to advertisers or data brokers.
5. Cookies, analytics and local storage
EmoScan may use browser storage and analytics technologies for functionality, language preferences, security and understanding how the website is used. More information is available in our Cookie Policy.
6. Data retention
Content submitted to EmoScan analysis tools is not retained by EmoScan after processing. Technical logs and analytics information may be retained only for as long as reasonably needed for security, troubleshooting and product improvement.
7. Security
EmoScan uses encrypted HTTPS connections to protect information while it is transmitted between your browser and the service. We also aim to reduce privacy risk by minimizing the amount of information retained.
No online service can guarantee absolute security, so users should avoid submitting information that is not appropriate for processing by an online AI service.
8. International processing
Some technology providers used to operate EmoScan may process information outside your country. Where GDPR requires safeguards for international transfers, appropriate legal mechanisms should apply through the relevant service provider arrangements.
9. Your GDPR rights
Where GDPR applies, you may have rights including access to your personal data, correction of inaccurate data, deletion, restriction of processing, objection to certain processing, data portability where applicable, and withdrawal of consent where processing is based on consent.
You may also have the right to lodge a complaint with the data protection authority in your country.
10. Automated analysis
EmoScan uses automated systems to analyze emotional and communication signals. Results are estimates based on the submitted content. They are not proof of what a person actually feels, and EmoScan is not intended to make legal, employment, medical or similarly significant decisions about individuals.
11. Privacy by design
Protecting user information is part of how EmoScan is designed. We aim to minimize data collection, avoid unnecessary user profiles, limit retention and clearly explain the role of AI and third-party services.
12. GDPR requests and contact
If you have a question about your personal data or want to exercise a GDPR right, contact:
