Privacy Policy
Last updated 9 August 2026
What we collect
- Account details. Your email address and a password hash, stored by Supabase.
- Business details. The name, category, city, hours, services, phone and website you enter for each business you monitor.
- Scan results. The questions we ask AI engines, the answers they return, and the sources those answers cite.
- Subscription status. Whether your subscription is active, plus identifiers issued by Stripe.
What we never collect
- Full card numbers. Payment details are entered on Stripe's own checkout and never pass through us.
- Anything about your customers. We only query public information about your business.
Who processes your data
We do not sell personal data and do not share it for advertising. Four processors, each for one function:
- Supabase — database, authentication and report storage.
- Vercel — hosting.
- Google (Gemini API) — receives the business name and city in each query.
- Resend — delivers report and alert emails.
Report files
Your PDF reports are stored privately. They are encrypted at rest by our storage provider and served only over HTTPS, and there is no public link to any of them — a report file cannot be opened by URL alone.
When you open a report we check that the business it belongs to is yours, then issue a one-off link that stops working after five minutes. That is also why report emails send you to your dashboard instead of carrying a file link: a link inside an email can be forwarded, sit in an inbox for years, or leak through a mail provider. A five-minute link cannot.
This was not always true. Until August 2026 report files sat in a public bucket, where anyone holding the exact URL could open one. That is fixed, and we would rather say so here than quietly change it.
Every report and alert email carries a one-click unsubscribe link. Unsubscribing stops email only; monitoring continues and reports stay available in your dashboard.
Retention and your rights
Data is kept while your account exists. Deleting a business deletes its scan history, reports and competitor records immediately. To delete your account entirely, email us and we will remove it.