Privacy Policy

1. Data We Collect

We collect only what is necessary to provide the InduWatch service:

• Account data: your email address, created when you sign up.
• Competitor data: the competitor names and website URLs you choose to track.
• Scraped page content: publicly accessible web pages from competitor websites you add, stored as snapshots to detect changes. This is third-party public content, not personal data about you.
• AI-generated analysis: structured analysis of page changes, produced by our AI provider (Anthropic) and stored against your account.
• Industry intelligence feed: publicly available content fetched from RSS feeds (e.g. TechCrunch, VentureBeat). This is not personal data.
• Session & usage data: login timestamps and basic authentication session data managed by Supabase Auth.

We do not collect payment card details (handled entirely by Stripe), browsing behaviour outside of InduWatch, or any sensitive personal data.

2. How We Use Your Data

Your data is used exclusively to provide and improve the InduWatch service: monitoring competitor pages, detecting changes, running AI analysis, and sending you email briefings you opted into. We do not sell your data to third parties. We do notuse your data to train AI models. Scraped page content sent to Anthropic's API is processed under a Data Processing Agreement and not used for model training.

3. Data Retention

• Page snapshots: automatically deleted after 90 days.
• Digest history: retained for 12 months, then deleted.
• Account data: retained until you delete your account, after which all associated data is permanently and irreversibly removed (competitors, tracked pages, snapshots, changes, digests).

4. Cookies & Local Storage

InduWatch uses no tracking cookies. We use Plausible Analytics, which is cookieless and GDPR-compliant by design — it does not collect or store personal data.

We use one essential cookie: a session cookie set by Supabase Auth to keep you logged in. This cookie is strictly necessary for the service to function and does not require consent under GDPR.

We use localStorage for UI preferences only (e.g. dismissing notices). No personal data is stored there.

5. Data Processors

We share data with the following third-party processors solely to operate the service. All processors are bound by Data Processing Agreements where required by GDPR:

6. Lawful Basis (GDPR)

We process your personal data on the following lawful bases:

• Contract performance — to provide the InduWatch service you signed up for (account data, competitor tracking, briefing delivery).
• Legitimate interest — to send you digest emails you explicitly opted into and to maintain service security and integrity.

7. Your Rights (GDPR)

If you are in the EU/EEA, you have the following rights:

• Right of access: request a copy of the personal data we hold about you — email contact@induwatch.com.
• Right to erasure: delete your account from Settings — this permanently removes all associated data. You may also email us if you need assistance.
• Right to portability: request an export of your data by emailing us.
• Right to object: you may object to processing based on legitimate interest by contacting us.
• Right to rectification: contact us to correct inaccurate data.

You also have the right to lodge a complaint with your national data protection authority (in Belgium: the Autorité de Protection des Données).

8. Contact

For privacy questions, data requests, or to exercise your rights, contact us at contact@induwatch.com. We aim to respond within 30 days.