PRE-LAUNCH DRAFT
Privacy Policy
This draft describes the planned service and is not the final privacy notice. Final retention periods, international transfer safeguards, and the privacy contact must be confirmed before collecting production customer data.
Information the service may process
Account email and profile details; workspace, project, and teammate information; website URLs and business objectives entered by customers; public page content fetched for a report; report results and source links; payment and subscription status received from Stripe; and technical logs needed to secure and operate the service.
Why it is used
To create accounts, deliver reports and monitoring, manage team access and billing, prevent abuse, support customers, and maintain the service. Public competitor-page content is analyzed to produce the requested competitive research.
Service providers
The planned infrastructure includes Cloudflare for application delivery, Supabase for authentication and database hosting, Stripe for payments, a web extraction provider such as Firecrawl, an AI provider such as Google Gemini, and Resend for transactional email. Production configuration and applicable data-processing terms must be checked before use. Payment card details are handled by the payment provider and are not intended to be stored by SpySift.
Retention and deletion
A proposed policy is to retain report content for up to 12 months while an account remains active and delete account data within 30 days after a verified deletion request, except records required for accounting, security, or legal obligations. These periods are subject to confirmation and may not be treated as final until published in the production policy.
Security and international processing
The service is designed to use server-side secrets, authenticated access, and role-based workspace permissions. Providers may process data in the United States or other countries. The final notice must identify the controller, lawful bases, applicable rights, transfer safeguards, complaint route, and any relevant state privacy disclosures.
Your privacy rights
Depending on your location, you may have rights to access, correct, export, restrict, or delete personal information. Production support and request channels will be listed here before account registration is enabled.
Controller and contact
SpySift is operated by MB Letodri, company number 308160180, registered address Biržiškų g. 36-1, LT-11111 Vilnius, Lithuania.
Customer support and privacy requests: support@spysift.com. The effective date and supervisory authority details will be finalized before production use.