Table of contents
Data collected
We collect the following personal data to provide and improve Competitor Insight:
- Email address provided at sign-up for account creation and communication.
- Business context (a short one-liner, target customer, product description, pricing, differentiators, common objections) so we can interpret competitor changes through the lens of your business. During onboarding you can have these fields drafted from your own website by our AI — you review and edit before they're saved.
- Competitor domains you add, plus the public web pages we then scrape from those domains on your behalf.
- Product analytics via PostHog: pages viewed, actions taken, and session recordings with all visible text inputs masked. After you sign in, your email address is linked to your usage so we can debug issues you report.
- Support chat messages sent through the Crisp live chat widget.
- IP address for rate limiting purposes (not stored long-term).
- During the private beta, we may set up an account for you directly (using the email address you provided when requesting a briefing) rather than routing you through self-serve sign-up.
- If you leave your email on our waitlist while sign-ups are closed, we store that email so we can contact you when a spot opens, along with basic marketing-attribution parameters from the link you arrived through (e.g. which post or channel referred you) and your browser locale and timezone. Ask us at any time and we'll remove your waitlist entry.
How we use AI
The core of Competitor Insight is AI-generated briefings. We send three kinds of information to OpenAI's API:
- The content of the competitor pages we monitor for you (public web content we've scraped on your behalf).
- The business context in your account (one-liner, target customer, positioning, pricing, differentiators, objections), so the briefings are interpreted through the lens of your business.
- During onboarding, the public pages of your own company website (typically the homepage, pricing, product, and about pages) so OpenAI can draft the first version of your business-context fields for you to review and edit. This happens on demand — when you start the onboarding wizard or click "Refresh from domain" in Settings — up to a small cap of attempts per account.
We use OpenAI's API under its commercial terms. Under those terms, your inputs are not used to train OpenAI's models. Per OpenAI's current enterprise-privacy terms, API inputs and outputs may be retained by OpenAI for a short period — up to about 30 days at the time of writing — to provide the service and monitor for abuse (with longer retention only where legally required).
Briefings are generated by the model — a human doesn't review each one before it lands in your account. Treat them as a research aid, not as legal, financial, or other advice with binding consequences.
We do not send your data to any other AI provider.
Retention
We keep your data only as long as we need it to run the service, and remove it on request. Specifically:
- Account data (email, business context, competitors, briefings) is retained while your account is active, and for up to 30 days after you ask us to delete it.
- When we delete an account we erase your personal data — email, business context, competitors, briefings, snapshots and history. We keep anonymized usage and cost records (token counts and amounts, with no name, email, or page content) for accounting and to keep our AI spend within budget.
- Beta accounts we set up for you are managed directly by the founder. Email us at any point — before or after you've claimed the account — and we'll delete it by hand. Unclaimed beta accounts are reviewed periodically and may be removed once they're no longer needed.
- Waitlist entries (email plus attribution parameters, locale and timezone) are kept until sign-ups reopen and we've contacted you, or until you ask us to remove your entry — whichever comes first.
- Product analytics events and session recordings (via PostHog) are retained per PostHog's retention settings for our current plan.
- Support chat history (via Crisp) is retained per Crisp's standard settings.
- Transactional email logs (via Resend) are retained per Resend's current plan-tier retention settings.
Third parties
We share data with the service providers listed below. We do not sell your data to anyone. We've split them into two groups: the services that receive your account content, and the infrastructure and asset providers that only see the technical minimum needed to serve pages.
Account-content services
- PostHog — product analytics and session recording, hosted in the EU region (eu.posthog.com).
- Crisp — live chat widget (crisp.chat).
- Resend — transactional email delivery (resend.com).
- OpenAI — AI processing for briefing generation and onboarding prefill (see How we use AI).
Infrastructure and assets
- Hetzner — VPS hosting for the app itself, in Germany. Sees whatever the app processes at the infrastructure layer (database, storage, request logs).
- Google Fonts — serves the fonts the site uses (fonts.googleapis.com, fonts.gstatic.com). Receives your IP address for the technical purpose of delivering fonts; does not receive any of your account content.
International transfers
The app itself and your account database run on Hetzner in Germany (EU). Some of our providers process data in the United States — notably OpenAI and Resend, and also Google Fonts for font delivery. Where required, we rely on the standard contractual protections these providers offer for international data transfers.
Your rights
If you are located in the European Economic Area, you have the following rights regarding your personal data:
- Right to access — request a copy of the personal data we hold about you.
- Right to rectification — request correction of inaccurate data.
- Right to erasure — request deletion of your data ("right to be forgotten").
- Right to restrict processing — request that we limit how we use your data.
- Right to data portability — receive your data in a structured, machine-readable format.
- Right to object — object to our processing of your personal data.
To exercise any of these rights, contact privacy@competitorinsight.app. We'll respond within 30 days.
Contact
For privacy questions or data requests, email privacy@competitorinsight.app.
Changes to this notice
If we make substantive changes to this notice, we'll update the "Last updated" date at the top. For changes that affect how we process the data of existing users, we'll notify you by email before they take effect.