🔒 We only scan publicly available web pages. We never access proprietary systems, internal tools, or confidential information of any kind.
1. Who We Are
Competitor Action Engine ("we," "our," or "us") is a competitive intelligence service that monitors publicly available website content and delivers AI-powered analysis briefs. Our service is accessible at competitor-action-engine.polsia.app.
2. What Data We Collect
2.1 Information You Provide
When you create an account or project, we collect:
- Email address — used to deliver your competitive briefs and for account access
- Company name — used to personalize your briefs
- Your company website URL (optional) — used to provide competitor analysis relative to your own positioning
- Competitor URLs — the public websites you want us to monitor
2.2 Automatically Collected Data
We collect standard server logs and analytics data when you use our service:
- IP address and browser type (for security and performance)
- Pages visited and features used (for product improvement)
- Timestamps of actions (scan requests, brief views)
2.3 Publicly Available Website Content
We scrape and store text content from the public-facing web pages you specify as competitors (homepage, pricing page, changelog). This is content that any internet user can view without authentication. We do not access:
- Password-protected pages or admin panels
- Internal documentation or private repositories
- Any system requiring credentials
- Personal data of your competitors' employees or customers
3. How We Use Your Data
We use the data we collect to:
- Generate competitive intelligence briefs and deliver them to your email
- Detect changes in competitor websites over time
- Personalize analysis based on your company's positioning (when you provide your URL)
- Operate, maintain, and improve our service
- Communicate with you about your account and service updates
- Prevent fraud and abuse
We do not sell your personal data to third parties. We do not use your data for advertising.
4. Data Retention
- Account data (email, company name): retained while your account is active, deleted within 30 days of account deletion request
- Website snapshots (scraped competitor content): retained for 12 months to enable trend analysis, then automatically purged
- Generated briefs: retained for 12 months so you can access your history
- Server logs: retained for 90 days for security and debugging purposes
5. Data Sharing
We share data only in these limited circumstances:
- Service providers: We use third-party infrastructure (cloud hosting, database services) that process data on our behalf under data processing agreements
- AI processing: Competitor page content is sent to AI APIs (OpenAI) for analysis. This content is publicly available text from websites you specify. We do not send your personal information to AI APIs
- Legal compliance: We may disclose data if required by law or to protect our legal rights
- Business transfers: In the event of a merger or acquisition, data may transfer to the new entity under the same privacy obligations
6. GDPR — Rights for EU/EEA Residents
If you are located in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):
- Right of access — Request a copy of the personal data we hold about you
- Right to rectification — Request correction of inaccurate personal data
- Right to erasure — Request deletion of your personal data ("right to be forgotten")
- Right to data portability — Request your data in a machine-readable format
- Right to restrict processing — Request that we limit how we use your data
- Right to object — Object to processing based on legitimate interests
- Right to withdraw consent — Withdraw consent at any time where processing is consent-based
To exercise any of these rights, email us at privacy@competitor-action-engine.polsia.app. We will respond within 30 days.
6.1 Legal Basis for Processing (GDPR)
We process your personal data under the following lawful bases:
- Contract performance — Processing your email and project data to deliver the service you requested
- Legitimate interests — Improving our service, security monitoring, and fraud prevention
- Legal compliance — Retaining data as required by applicable law
6.2 Data Transfers
Our services are hosted in the United States. If you are in the EU/EEA, your data will be transferred to and processed in the US. We ensure appropriate safeguards are in place (Standard Contractual Clauses with our service providers).
7. Cookies
We use minimal cookies:
- Session/auth cookies — Required to maintain your login session
- Analytics — Anonymous usage analytics to improve the product (no tracking across third-party sites)
You can disable cookies in your browser settings, though this may affect service functionality.
8. Security
We take reasonable technical and organizational measures to protect your data, including encrypted data transmission (HTTPS), access controls, and regular security reviews. No system is 100% secure — if you suspect unauthorized access, contact us immediately.
9. Children's Privacy
Our service is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected such data, contact us and we will delete it promptly.
10. Changes to This Policy
We may update this policy from time to time. We'll notify you by email and update the "Last updated" date at the top. Continued use of the service after changes constitutes acceptance of the updated policy.
11. Contact Us
For any privacy-related questions, data requests, or complaints:
If you are in the EU and unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.