Privacy Policy

1. Who We Are

SpyGlow is an AI-powered competitive intelligence platform. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and service.

2. What We Collect

We collect the following categories of data:

Account Information:

• Email address and name (provided at registration)
• Password (stored as a secure hash, never in plain text)
• Company name, domain, and business profile information
• Role and business stage (provided during onboarding)

Service Data:

• Competitor websites, keywords, and monitoring configurations you provide
• AI-generated reports, battle cards, insights, and analysis results
• AskGlow conversation history
• SEO audit results, content gap analyses, and keyword research data

Technical Data:

• IP address
• Browser type and version
• Device information
• Pages visited and features used within the dashboard
• Error logs and performance metrics

Payment Data:

Billing information is processed and stored by our payment provider (Dodo Payments). We do not store your full credit card details on our servers.

3. How We Use Your Data

We use your data to:

• Provide and operate the SpyGlow service, including AI-powered monitoring and analysis
• Process your queries through AI models to generate competitive intelligence
• Send transactional emails (account verification, OTP codes, password resets, alerts, digest reports)
• Process subscription payments
• Monitor service health and fix technical issues
• Improve the Service based on aggregated, anonymized usage patterns

We do not use your data to:

• Train public AI models
• Sell or rent your personal information to third parties
• Share your competitor monitoring lists or strategic insights with other users
• Send marketing emails without your consent

4. AI & Data Processing

SpyGlow uses third-party Large Language Models (LLMs) to analyze public competitor data and generate insights.

• When you use AskGlow, Content Generation, Battle Cards, or other AI features, your queries and relevant context are sent to AI providers (OpenAI, Perplexity AI) for processing.
• Under our agreements with these providers, they do not use your data to train their models.
• AI-generated insights are private to your account.
• AI context data may be temporarily cached (up to 20 minutes) to improve performance and is automatically deleted after expiration.

5. Data Sharing & Subprocessors

We share data with the following third-party service providers solely to operate the Service:

We do not sell your personal information to any third party.

6. Cookies

SpyGlow uses cookies for the following purposes:

• Authentication cookies: To keep you logged in and maintain your session. These are essential for the Service to function.
• Preference cookies: To remember your settings such as theme preference and onboarding progress. These are stored in your browser's local storage.

We do not use third-party advertising or tracking cookies.

You can manage cookies through your browser settings, but disabling essential cookies may prevent you from using the Service.

7. Data Retention

• Account data: Retained for as long as your account is active.
• Competitive intelligence data: Monitoring history, reports, and AI-generated insights are retained while your account is active.
• AskGlow conversations: Retained while your account is active.
• Technical logs: Retained for up to 90 days for debugging and security purposes.
• After account deletion: All personal data and associated competitive intelligence data will be deleted within 30 days of account deletion, except where retention is required by law.

8. Your Rights

Depending on your location, you may have the following rights:

For all users:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Deletion: Request deletion of your account and all associated data.
• Export: Request an export of your competitive intelligence data.

For EU/EEA users (GDPR):

• Legal basis: We process your data based on: (a) contractual necessity to provide the Service, (b) legitimate interest to improve the Service, and (c) your consent where applicable.
• Data transfers: Your data may be transferred to and processed in countries outside the EU/EEA (including the United States) where our subprocessors operate. We rely on standard contractual clauses and provider compliance programs to ensure adequate protection.
• Right to object: You may object to processing based on legitimate interest.
• Right to restrict: You may request restriction of processing in certain circumstances.
• Supervisory authority: You have the right to lodge a complaint with your local data protection authority.

For California users (CCPA/CPRA):

• Right to know: You may request details about the categories and specific pieces of personal information we collect.
• Right to delete: You may request deletion of your personal information.
• No sale of data: We do not sell personal information. We do not share personal information for cross-context behavioral advertising.
• Non-discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, contact us at Click to show email.

9. Children's Privacy

SpyGlow is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from someone under 18, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy as our service evolves. We will notify you of material changes via email or in-app notification. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact

Privacy questions? Email Click to show email.

For general support: Click to show email.