Privacy Policy

Last updated: May 2025

This Privacy Policy explains how Competitor Analysis Autopilot ("we", "us", or "our") collects, uses, and protects your information when you use our service.

1. Information We Collect

We collect the following information when you create an account or use the service:

• Email address — used to identify your account and communicate with you.
• Password — stored as a one-way hash. We cannot see your password.
• URLs you submit — the website URLs you enter to run an analysis. These are stored so you can access past reports.
• Analysis reports — the AI-generated reports produced from your URL submissions. Stored in your account for your reference.
• Billing information — if you subscribe to a paid plan, payment is processed by Stripe. We do not store your card details. We store your Stripe customer ID and subscription ID.
• Usage data — how many reports you have run, when you created your account.

2. How We Use Your Information

• To provide and operate the service — running analyses, displaying your report history.
• To manage your account and subscription.
• To send transactional emails (account confirmation, billing receipts). We do not send marketing emails without your consent.
• To enforce our plan limits and terms of service.

3. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We share data only with the following service providers, strictly to operate the service:

• Anthropic — the text content extracted from the URLs you submit is sent to Anthropic's Claude API to generate the analysis report. Anthropic's privacy policy applies to this data.
• Stripe — payment processing for paid subscriptions. Stripe's privacy policy applies to billing data.

4. Data Retention

We retain your account data and reports for as long as your account is active. If you delete your account, your data is permanently removed from our systems within 30 days. You can request account deletion at any time by emailing us at hello@example.com.

5. Security

We use industry-standard practices to protect your data: passwords are hashed using bcrypt, database access is restricted to application credentials with limited permissions, and sensitive credentials are stored in environment variables, never in code.

6. Cookies

We use a single session cookie to keep you logged in. This cookie is strictly necessary for the service to function. We do not use tracking cookies or third-party analytics cookies.

7. Your Rights

You have the right to access, correct, or delete the personal data we hold about you. To exercise any of these rights, email us at hello@example.com and we will respond within 7 days.

8. Changes to This Policy

We may update this policy from time to time. If we make significant changes, we will notify you by email. Continued use of the service after changes constitutes acceptance of the updated policy.

9. Contact

Questions about this policy? Email us at hello@example.com.