This policy explains what personal data Mizan collects, why we collect it, who we share it with, and what rights you have. It applies to the Mizan service at mizanrtl.com.
The data controller is Boudjemline Saddam Hocine, Rue Hamimi Meziani, El Kseur, Béjaïa, Algeria. Contact: mizanrtl.com/contact.
Payment data does not reach us. Purchases are processed by Paddle.com as Merchant of Record. Paddle collects your billing details and payment method directly, acting as an independent controller for that data. We never see or store your card number.
Your email address, and a hashed password if you set one. We use this to create your account, issue licence keys, and contact you about the service. Provided directly by you.
The URLs you submit, and the reports generated from them. Reports contain screenshots of the scanned pages, extracted text fragments, CSS selectors, and descriptions of detected layout defects.
Consider what you scan. If you scan a page that displays personal data — a user profile, an order containing a customer's name, a populated admin panel — that data will appear in the screenshots and text fragments stored in your report. Where possible, scan staging environments or pages populated with test data. You are the controller of any such data; we process it on your instruction.
Server logs recording IP address, browser user agent, request paths, timestamps, and error traces. Used to operate the service, diagnose faults, and detect abuse.
From Paddle we receive confirmation of your subscription status, the plan purchased, and a transaction reference — enough to activate and maintain your licence. We do not receive your full payment details.
We do not use advertising cookies, third-party analytics trackers, or behavioural profiling. Cookies we set are limited to those needed to keep you signed in and to maintain your session.
We do not send marketing email unless you have asked for it, and every such message carries an unsubscribe link.
We use a small number of processors, each handling a specific function:
We do not sell personal data, and we do not share it with advertisers or data brokers. We disclose data to authorities only where legally compelled, and we will notify you where we are lawfully able to.
We are established in Algeria, and our hosting and email providers are located in the United States and the United Kingdom. Personal data is therefore transferred outside the European Economic Area.
Where such transfers involve data of individuals in the EEA or the United Kingdom, they are made under the European Commission's Standard Contractual Clauses, which our providers incorporate into their data processing agreements.
Data in transit is protected by TLS. Passwords are stored as salted hashes, never in plain text. Administrative access to production systems is restricted to the operator, and access credentials are rotated when there is any indication of exposure.
No system is perfectly secure. If a breach occurs that is likely to result in a risk to your rights, we will notify you and any competent supervisory authority without undue delay, and in any event within seventy-two hours of becoming aware of it.
Subject to applicable law, you may:
Send your request through our contact form. We respond within thirty days. We do not charge for these requests unless they are manifestly unfounded or excessive.
If you are in the EEA or the United Kingdom and believe we have handled your data improperly, you may complain to your national supervisory authority. If you are in Algeria, you may address the national authority for the protection of personal data established under Law 18-07.
Mizan is a professional development tool and is not directed at children. We do not knowingly collect data from anyone under sixteen. If you believe a child has provided us with personal data, contact us and we will delete it.
We will update this policy as the service and applicable law develop. Where a change materially affects how we handle your data, we will notify you by email before it takes effect. The date at the top of this page always reflects the current version.