CompetitorRadar ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our competitor monitoring platform, website, and related services (collectively, the "Service").
By using the Service, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
1.1 Account Information
When you create an account, we collect:
- Email address
- Full name (optional)
- Company name (optional)
- Hashed password (we never store plaintext passwords)
1.2 Competitor Monitoring Data
When you set up competitor tracking, we collect and store:
- Competitor URLs and website addresses you submit for monitoring
- Monitoring preferences (frequency, alert types, tracked metrics)
- Snapshots and change history of monitored competitor pages
- Pricing data, product listings, and other publicly available content from competitor websites
- Alert history and notification logs
Important: We only monitor publicly accessible information on competitor websites. We do not access password-protected areas, private APIs, or non-public data of any kind.
1.3 Payment Information
Payment processing is handled entirely by our third-party payment processor, PayPal. We do not store or have access to your credit card numbers, bank account details, or PayPal credentials. We retain only transaction identifiers, billing dates, and subscription status provided by PayPal for record-keeping and account management purposes.
1.4 Usage Data
We automatically collect certain information when you use the Service:
- IP address
- Browser type and version
- Pages visited and time spent on the Service
- Referring URL
- Device information (operating system, screen resolution)
- Feature usage patterns (dashboards viewed, reports generated, alerts configured)
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the competitor monitoring Service
- Monitor competitor websites and detect changes on your behalf
- Send real-time alerts and notifications when competitor changes are detected
- Generate analytics reports and competitive intelligence dashboards
- Process payments and manage subscriptions via PayPal
- Send transactional emails (alert notifications, weekly digests, receipts, account updates) via Resend
- Improve and optimize the Service based on usage patterns
- Detect, prevent, and address technical issues or abuse
- Respond to customer support requests
- Send marketing communications (only with your explicit consent; you can opt out at any time)
3. Data Storage and Security
We take the security of your data seriously:
- Database: Account data and monitoring configurations are stored in Supabase (PostgreSQL) with row-level security policies and encrypted connections
- Infrastructure: Our monitoring workers and API run on Cloudflare Workers with edge-level encryption
- All data is encrypted in transit using TLS 1.3
- Data at rest is encrypted using AES-256 encryption
- Authentication tokens are securely managed and rotated regularly
- We conduct regular security reviews of our infrastructure
- Employee access to user data is logged, role-based, and limited to what is necessary
3.1 Data Retention
We retain your data as follows:
- Account data: Retained for as long as your account is active
- Monitoring data and change history: Retained for up to 12 months of historical data, depending on your subscription plan
- Alert logs: Retained for 90 days
- Usage analytics: Retained in aggregated, anonymized form indefinitely
If you delete your account, we will delete your personal data, monitoring configurations, and stored competitor data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention).
4. Cookies and Tracking Technologies
We use the following cookies and similar technologies:
- Essential cookies: Required for authentication, session management, and security. These cannot be disabled without breaking core functionality.
- Preference cookies: Remember your settings and preferences (e.g., dashboard layout, notification preferences, timezone).
- Analytics cookies: Help us understand how visitors interact with the Service. We use privacy-focused analytics that do not track users across websites and do not sell data.
You can control cookies through your browser settings. Disabling essential cookies may prevent you from using certain features of the Service.
5. Third-Party Services
We share information with the following categories of third-party service providers, each of which is bound by their own privacy policies:
- Payment processing (PayPal): PayPal processes all payments on our behalf. We send them your email address and transaction details. Their privacy policy governs their use of your information. PayPal Privacy Policy
- Email delivery (Resend): We use Resend to send transactional emails including alert notifications, weekly reports, and account communications. Your email address and name are shared with Resend for delivery purposes only.
- Database hosting (Supabase): Our application data is stored on Supabase's managed PostgreSQL infrastructure. Supabase maintains SOC 2 Type II compliance.
- Edge infrastructure (Cloudflare): Our monitoring workers and website are served via Cloudflare, which processes request metadata (IP addresses, headers) for performance and security.
We do not sell, rent, or trade your personal information to third parties for marketing purposes. We will never monetize your competitor monitoring data.
6. Your Rights
Depending on your jurisdiction (including GDPR, CCPA, and other applicable privacy laws), you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you, including your monitoring configurations and stored data.
- Correction: Request correction of inaccurate or incomplete personal data.
- Deletion: Request deletion of your personal data, account, and all associated monitoring data.
- Export / Portability: Request a machine-readable export of your data, including monitoring history, alert logs, and account information.
- Objection: Object to certain types of data processing, including marketing communications.
- Restrict processing: Request that we limit processing of your personal data in certain circumstances.
- Withdraw consent: Withdraw consent for marketing communications or non-essential data processing at any time.
To exercise any of these rights, contact us at govajota@petjota.com. We will respond to your request within 30 days.
7. International Data Transfers
Your data may be transferred to and processed in countries other than your own, as our infrastructure providers operate globally. We ensure appropriate safeguards are in place for any international transfers, including Standard Contractual Clauses where required by applicable law (such as GDPR).
8. Children's Privacy
The Service is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16, we will take steps to delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes by:
- Posting the updated policy on this page with a new "Last updated" date
- Sending an email notification to your registered email address for significant changes
Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy, our data practices, or wish to exercise your data rights, contact us at: