Privacy policy
Last updated September 29, 2026.
Scanley measures how AI assistants answer questions about banking. We sell measurement honesty, so this policy is written the same way: specific about what this site collects, who helps us collect it, and how to opt out.
What you give us directly
If you request a scan or subscribe to a metro report, we collect what you type into the form: your name, work email, role, institution, and anything you write in the notes. We use it to run and deliver what you asked for, and to follow up about our services. It goes into our customer records; it is never sold.
What we measure ourselves
Our own first-party measurement records, for each page view: the page path, the referring site, and a random session identifier that exists only for that browser tab session. It sets no cookies, does not record your IP address or browser details, and is skipped entirely when your browser sends a Do Not Track signal. We use it to understand which AI assistants and search engines send visitors here. We also use Vercel Analytics, Google Analytics 4 and PostHog for traffic metrics: which pages are read, which links are clicked, how visitors arrived, their approximate location, and whether a scan was requested. Google Analytics and PostHog set their own cookies, unlike our first-party measurement above, and both are skipped when your browser sends a Do Not Track signal. On the public pages PostHog does not record sessions.
Visitor identification
We use a third-party identification service (RB2B) to recognize the company, and in some cases the business contact, behind a visit to this site. In their recommended words:
When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses.
You can opt out of this identification at app.retention.com/optout. Identification runs only on this site's public pages, and only on our production domain.
Inside the Scanley console
If your organization uses Scanley, the people on your team who sign in to the console are known to us by their work email. For each of them we record when they sign in and which console pages they open, with the time. We use it to see whether the tools we build are being used and where people get stuck, and our agent uses it to decide when a check-in would help. It is visible only to the Scanley team.
We also record console sessions with PostHog, so we can watch where someone hesitated or stopped and fix it. Recordings capture what was on the screen and where the mouse went. Anything typed into a field is masked and never recorded. Session recording is skipped when your browser sends a Do Not Track signal. Recording happens only after sign-in; the public pages of this site are never recorded.
Who we share with
Service providers only, and only to run the services above: hosting and analytics (Vercel, Google Analytics, PostHog), visitor identification (RB2B), console session recording (PostHog), and our own customer records system. We do not sell personal information, and we do not share it with anyone for their own advertising.
Your choices
Turn on Do Not Track and our measurement of the public pages skips you, and so does console session recording. Use the opt-out link above and the identification vendor stops resolving you. Email us and we will delete what we hold about you, tell you what it is, or correct it. This site works fully with all of the above exercised.
Contact
Privacy questions and requests: hello@meetscanley.com. We answer them ourselves, usually within a few business days.