Privacy Policy
What personal data we hold, why we hold it, and what you can ask us to do with it.
This is a starting point, not legal advice. Replace the bracketed placeholders with your own details and have the result reviewed by someone qualified in your jurisdiction before you publish it.
1. Who is responsible for your data
[YOUR COMPANY NAME], of [YOUR REGISTERED ADDRESS], is the data controller for the personal data described in this policy. You can reach us at [YOUR CONTACT EMAIL].
2. What we collect
| Data | Why we hold it |
|---|---|
| Your name and email address | To create your account, sign you in, and send you reports and alerts you have asked for |
| Your password, stored hashed | To authenticate you. We cannot read it. |
| Workspace and store settings | To run the service as you have configured it |
| Review content collected from sources you connect | To produce the analysis you asked for |
| Technical logs, including IP address | To keep the service secure and to diagnose faults |
3. Review content and the people who wrote it
The service collects reviews that are already published publicly. Those reviews may contain a display name chosen by their author. We hold that content so we can analyze it for you. We do not use it to build profiles of individual reviewers, and we do not sell it.
4. Our lawful basis
We process account data to perform our contract with you. We process technical logs on the basis of our legitimate interest in operating a secure service. Where we rely on consent — for optional communications — you may withdraw it at any time.
5. Who we share it with
We do not sell personal data. We share it only with service providers who help us run the service, and only as far as they need it. [LIST YOUR PROCESSORS HERE: your hosting provider, your email provider, and any analytics or AI provider you have enabled.]
6. Where it is held
[STATE WHERE YOUR SERVERS ARE, AND WHETHER DATA LEAVES THAT REGION. If you transfer data internationally, describe the safeguards you rely on.]
7. How long we keep it
Account data is kept for as long as your account is open, and for [YOUR RETENTION PERIOD] afterwards. Collection run history is pruned automatically after 90 days, and provider usage logs after a year.
8. Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, to correct it, to have it deleted, to object to or restrict its processing, and to receive it in a portable form. To exercise any of these, write to [YOUR CONTACT EMAIL]. You also have the right to complain to your local data protection authority.
9. Security
Access is protected by authentication and role-based permissions. Sensitive values, including any provider API key you supply, are encrypted at rest. No system is perfectly secure, and we will tell you promptly if a breach affects your data.
10. Changes
We will update this policy when our practices change, and the date at the top of this page will change with it.
[email protected]