Privacy Policy
Last updated: October 18, 2026
This policy explains what personal data Spotlightrend ("Spotlightrend", "we", "us") collects when you use spotlightrend.com and the Spotlightrend app at app.spotlightrend.com (together, the "Service"), why we use it, and the choices you have. Questions: hello@spotlightrend.com.
1. Who is responsible
For account, billing and website data, Spotlightrend is the controller. For the content a customer company configures and collects in the Service (keywords, competitors, notes, reports), that company is the controller and Spotlightrend processes it on the company's behalf and instructions.
2. What we collect
- Account data: name, work email, password (stored only as a one-way hash), company name, your role in the company, and the companies you belong to.
- Billing data: the plan and term you bought, amounts, coupon codes and payment status. Card and PayPal account details are entered with PayPal and never reach our servers.
- Content you add: keywords, competitors and their websites, RSS feeds, notes, bookmarks, email subscriptions and support tickets.
- Collected public information: news articles, mentions and public competitor web pages that the Service gathers for your company from public sources.
- Usage and technical data: sign-in times, failed sign-in attempts (to protect your account), job logs, IP address and browser data in server logs.
- Contact form and support messages: what you write and the email you give us.
- Analytics: if enabled, Google Analytics / Google Tag Manager measure visits to our public pages (see Cookies).
3. Why we use it (and legal basis)
- To provide the Service you or your company signed up for: accounts, collection, AI analysis, alerts, reports and emails (performance of a contract).
- To take payments, issue receipts and send renewal reminders before your plan ends (contract; legal obligations for accounting records).
- To keep the Service secure, prevent abuse and fix problems (legitimate interests).
- To answer contact and support requests (legitimate interests / steps before a contract).
- To measure and improve our public website, if analytics is enabled (consent where the law requires it, otherwise legitimate interests).
- We do not sell personal data and do not use your company's content to train AI models.
4. Who we share it with
We use service providers who process data for us under contract, only as needed to run the Service:
- Hosting and database: Vercel (application hosting) and Neon (PostgreSQL database), in the EU (Frankfurt) region where available.
- Payments: PayPal, which processes your payment details under its own privacy policy.
- Email: our email provider (Hostinger) to send sign-in, notification, receipt and support emails.
- AI providers: Anthropic (Claude) and/or OpenAI, which analyze collected articles, page changes and your questions to produce classifications, summaries and reports. They act as our processors and do not use this data to train their models under our API terms.
- Slack, if your company connects it: messages your company chooses to send there.
- Authorities, when the law requires it, or to protect our rights and users.
5. International transfers
Some providers process data outside your country, including in the United States. Where required, transfers rely on adequacy decisions or standard contractual clauses.
6. How long we keep it
- Account and company data: while the account is active. When a paid plan ends, access is suspended but data is kept so you can renew; ask us to delete it at any time.
- Billing records: as long as tax and accounting law requires, even after an account is deleted.
- Server logs and sign-in records: for a limited time needed for security.
- We delete or anonymize data within 30 days of a verified deletion request, except what we must keep by law.
7. Cookies
We use only the cookies below. Analytics cookies are set only if analytics is enabled for the page you visit.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| mentioned_session | Spotlightrend | Keeps you signed in (strictly necessary) | 30 days, or until the browser closes if “Remember me” is off |
| sr_signup_claim | Spotlightrend | Lets the browser that started a signup checkout finish it (strictly necessary) | 2 hours |
| mentioned_theme | Spotlightrend | Remembers light or dark mode (preference) | 1 year |
| mentioned_view | Spotlightrend | Remembers list or grid view (preference) | 1 year |
| _ga, _ga_<ID> | Google Analytics | Counts visits and how pages are used (analytics) | Up to 2 years |
| PayPal cookies | PayPal | Payment and fraud prevention on the checkout page | Set by PayPal |
8. Your rights
Depending on where you live, you may ask to access, correct, delete or export your personal data, object to or restrict some uses, and withdraw consent. Write to hello@spotlightrend.com. If you belong to a customer company, we may refer requests about its content to that company. You may also complain to your data protection authority.
9. Security
Passwords are hashed, connections use HTTPS, connection secrets (API keys, payment credentials) are stored encrypted, and access to customer data is limited to what is needed to run and support the Service. No system is perfectly secure; tell us right away if you suspect a problem.
10. Children
The Service is for businesses and is not meant for anyone under 18.
11. Changes
We may update this policy. We will change the date above and, for significant changes, notify account admins by email or in the app.