Last updated: 17 April 2026
TODO: replace this scaffold with a legal-reviewed Privacy Policy before accepting real paying customers. Required by GDPR for any NL-based service processing EU personal data.
1. Data we collect
When you create an account, we store your email, name, password (hashed), and billing details (name, company, VAT number, country, postal code). When you configure competitors, we store the URLs you ask us to monitor. When the scraper runs, we store the visible text of those pages for change-detection purposes.
2. How we use your data
To provide the SpotRivals service: running the scraper, generating AI analyses, sending weekly digests, billing you monthly via Stripe, and responding to support requests.
3. Third-party processors
- Stripe (payment processing; US/EU): billing details.
- Anthropic (AI analysis; US): change diffs sent for classification and summarization. Anthropic retains data for abuse-monitoring purposes only; see their privacy policy.
- Resend (email delivery; EU/US): your email address and digest content.
- Sentry (error tracking; EU): anonymized error traces.
4. Retention
Page snapshots are kept in full for 28 days, then text-only for up to 1 year, then deleted. Account data is kept while your account is active and deleted within 30 days of account deletion request.
5. Your rights (GDPR)
You have the right to access, correct, delete, or export your data. Email support@spotrivals.com and we will respond within 30 days.
6. Cookies
We use only strictly-necessary cookies (session and CSRF protection). No tracking cookies, no third-party analytics.
7. Contact
Questions? Email support@spotrivals.com.