Privacy policy

We collect three kinds of information:

• Information you give us. Your name, email, company, billing details, and anything you type into the Service (competitor URLs, notes, reports).
• Information we collect automatically. Log data, device and browser info, IP address, approximate location, and product usage (which features you use, how often).
• Information from third parties. If you sign in with Google or another identity provider, we receive your name, email, and profile photo. If you’re invoiced, we receive billing metadata from our payment processor, never your card number.

We use your information to:

• Run the Service, including the parts you actively use.
• Keep you signed in, remember your preferences, and personalize your experience.
• Send transactional emails (receipts, security alerts, product updates you’ve opted into).
• Improve the Service, aggregate usage patterns help us ship better features.
• Prevent fraud, abuse, and security incidents, and to comply with law.

We do not sell your personal information. We do not train third-party generative models on your content.

We share information only with:

• Service providers who run our infrastructure (hosting, email delivery, analytics, payment processing) under contracts that limit their use of your data to serving us.
• Your organization. If your account is part of a team, admins in that team can see information about your use of the Service.
• Law enforcement when we’re legally required, or when we believe it’s necessary to prevent imminent harm.
• Acquirers in the event of a merger, acquisition, or asset sale. We’ll give you notice before your information becomes subject to a different privacy policy.

We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the Service is used. See our Cookie Policy for the full list and how to opt out.

We keep your data for as long as your account is active, and for a reasonable period after to handle disputes, billing, and legal obligations. When you delete your account, we remove your data within 30 days, except where we’re required to retain it longer by law.

Backups are rotated on a rolling basis and are fully purged within 90 days.

Depending on where you live, you may have rights to access, correct, export, delete, or restrict processing of your personal information. You may also have the right to object to processing and to withdraw consent.

To exercise any of these rights, email privacy@competitoresearch.com. We verify requests before acting on them.

If you’re in the EEA, UK, or Switzerland, our EU representative can be reached at the address above. If you’re in California, you may also have rights under the CCPA/CPRA. The same email reaches us.

We’re based in the United States. If you access the Service from elsewhere, your information will be transferred to and processed in the US. Where required, we rely on Standard Contractual Clauses and equivalent safeguards for cross-border transfers.

We encrypt data in transit and at rest, run continuous monitoring, and restrict access to your data on a need-to-know basis. More detail is in our Security page. No system is perfectly secure, if you spot a vulnerability, let us know.

The Service is not intended for anyone under 18. We don’t knowingly collect information from children. If you believe a child has shared information with us, email privacy@competitoresearch.com and we’ll remove it.

If we change this policy, we’ll update the date at the top and, for material changes, notify you by email or in-product before they take effect.

Privacy questions go to privacy@competitoresearch.com.