Privacy

What we collect about you

• Account: your username, email address, and a hashed password (never the password itself).
• Workspace: your company's website, the competitors you track, team members you invite, reports, battlecards, action-plan feedback and planning rules, and settings such as a Slack webhook.
• Billing: Stripe takes your card details directly. We keep only your Stripe customer and subscription IDs, your plan and its status; invoices and receipts stay in Stripe.
• Without an account: for the free tools and pricing lookup we keep a salted hash of your IP address for one day to enforce fair-use limits. If you ask to be emailed when a scan finishes, we keep that address until the one email is sent, then delete it.
• Technical: server logs (IP address, browser, pages requested, errors) for security and debugging, and two cookies: a session cookie that keeps you signed in and a CSRF cookie that protects forms. No analytics or advertising cookies.

What we collect from public sources

Competeteer is about companies, but some public sources name people. We collect only what is needed to report on a company:

• Company pages: captures of public pricing, product, changelog, roadmap, careers, blog and press pages, and archived copies from the Internet Archive.
• Job boards: titles, teams and locations of public job openings. No applicant data.
• Hacker News and review sites: public posts and reviews that mention a tracked product, which can include the author's public display name. We use them to report what people say about a product, never to profile the people who said it.
• Press: headlines and links to news articles that name a tracked company.

If you are named in something we captured and want it removed, email us; we remove it from Competeteer within 30 days.

How we use it

• To run the service: sign you in, monitor the companies you choose, and build your feed, reports, battlecards and action plans.
• To bill you through Stripe and send receipts.
• To send service emails you can't switch off while you have an account: email confirmation, billing, security notices and team invitations. The weekly digest and Slack alerts are optional and set in Alerts.
• To send occasional product updates and offers by email to account holders. Every one has an unsubscribe link, and unsubscribing doesn't affect service emails.
• To keep the service secure, prevent abuse, fix problems and improve Competeteer.

Where data-protection law asks for a legal basis: running your account is necessary to perform our contract with you; security, abuse prevention, product emails to existing users and reporting on public company information rely on our legitimate interests; anything else relies on your consent, which you can withdraw.

Shared monitoring

Company websites and their captured public pages form a shared corpus: if two workspaces track the same company, it is captured once. Other workspaces can see a company's public pricing history and may receive it as a suggested competitor. They never see who tracks it, your reports (unless you publish one), your notes or your action plans.

Who processes data for us

We share data only with providers that help run Competeteer, and only what each needs. We never sell or rent personal information, or share it for advertising.

• AI model providers (currently DeepSeek and Anthropic) read captured public pages, public mentions and the change summaries behind your action plans and battlecards. They receive no account details. DeepSeek processes data in China; Anthropic in the United States.
• A separate verification provider checks extracted prices against the captured page text.
• Our hosting provider runs the servers and database; our email provider delivers the emails described above.
• Stripe handles payments (United States).
• Slack, only if you connect it, receives the alerts you choose.
• Google Fonts, the Tailwind CDN and unpkg serve fonts and scripts to your browser, so they see your IP address when a page loads.

We may also disclose information when the law requires it, or to protect the safety, rights or property of our users, the public or us. If Competeteer is merged, acquired or sold, we will tell account holders by email before their information moves to a new owner.

Where your data is processed

Our servers are in India, and the providers above process data in the countries named. When we transfer personal information out of the European Economic Area, the United Kingdom or Switzerland, we rely on the safeguards the law provides, such as the European Commission's Standard Contractual Clauses.

How long we keep it

• Account and workspace data: while your account is open, then deleted within 30 days of closing it.
• Billing records: as long as tax and accounting law requires (usually up to 8 years in India).
• Server logs: rotated automatically and kept only as long as needed for security and debugging.
• Captures of public company pages: as long as the company is monitored, because the history is the product. Personal details in them are removed on request.

Your rights and choices

• Turn the weekly email and Slack alerts on or off in Alerts, and unsubscribe from product emails from any of them.
• Make a public report or battlecard private again at any time from Reports. Revoke MCP tokens from Integrations.
• Ask for a copy of your data, a correction, or deletion of your account and workspace by emailing hello@competeteer.com. We reply to verified requests within 30 days.
• Depending on where you live, you may also have the right to object to or restrict processing, to data portability, to nominate someone to act for you, and to complain to your data-protection authority. In India, write to our grievance contact at the same address; we acknowledge within 7 days.

Keeping it safe

Traffic is encrypted with TLS, passwords and API tokens are stored only as hashes, and access to production data is limited to people who run the service. No system is perfectly secure; if a breach affects your data, we will tell you and the relevant authorities without undue delay.

Children

Competeteer is a business tool for adults. We don't knowingly collect data from anyone under 18; if we learn we have, we delete it.