Privacy

What we collect about you

Account identity (your name, email address and authentication details) is handled by our identity provider, Clerk. We store the identifier they give us, your workspace membership and your role.

Workspace data is what you create: competitors, the source URLs you add, routing rules, notification channels and classification feedback.

Billing is processed by Paddle, who act as merchant of record. We never see or store your card details, only a subscription identifier, your plan and its status.

What we crawl, and what we don't

We fetch public pages and public APIs at the URLs you add. We honour robots.txt, rate-limit ourselves and back off on failure. There is no setting that disables this.

We do not crawl anything behind a login, paywall or access control, and we do not accept credentials for a competitor's site.

Snapshots of crawled pages are stored so findings can be verified against their source. Raw payloads are deleted after 30 days; the most recent snapshot per source is retained so diffing has a baseline.

Isolation between customers

Every record we store belongs to a workspace, and every query is filtered by it. Crawls are isolated per workspace: if two customers monitor the same page, each gets its own schedule, its own snapshots and its own history.

This costs us duplicated traffic and we accept that cost, because it means there is no shared store between customers to leak from.

Processing by AI models

Extracted page content and diffs are sent to our LLM provider for extraction, classification, battlecard maintenance and answering your questions. Your account details and credentials are never included.

We do not permit that content to be used to train third-party models.

What we never log

We log URLs, status codes and timings. We do not log request headers, cookies, session tokens or credentials of any kind. Not in application logs, not in crawl logs, not in error reports.

Your rights

You can export your workspace data, correct it, or delete it. Deleting a competitor removes its sources, findings, snapshots and battlecard. Deleting a workspace removes everything belonging to it.

If you're in the EEA or UK, you have the rights granted by the GDPR, including access, rectification, erasure, portability and objection. Email us and we'll action it.

Retention

Raw snapshot payloads are dropped after 30 days. Findings, battlecards and the changes you've accumulated are kept for the life of the workspace, because their value is the history. Deleted workspaces are purged within 30 days.