Privacy Policy

What we collect

Account details: your email address and, if you sign in with Google, the name, email address and profile picture Google shares. We request only the basic profile scopes and never read your Gmail, Drive or contacts.

What you give the product: the product URLs and descriptions you enter, the profile we build from them, your settings, the alert channels you add (email addresses, Slack and Discord webhooks), and what you do with leads.

Usage data: pages viewed, actions taken, device and browser information, IP address, and error reports, so we can run and improve the service.

Public Reddit content

Redditoro reads public Reddit posts, comments and public author details to find conversations relevant to your product. This content is public, is stored only as long as it is useful for your leads, and is not combined with private data about those authors.

How we use it

To provide the service: finding and scoring leads, sending the alerts you asked for, securing accounts, preventing abuse, and answering support requests. We do not sell personal data and we do not use it for advertising.

Legal bases (GDPR)

Where the GDPR applies we process your data to perform our contract with you (providing the service and billing it), for our legitimate interests (securing and improving the service, preventing abuse), to meet legal obligations such as tax records, and with your consent where one is needed, as for optional integrations.

Payments

Subscriptions are sold and processed by Creem (creem.io) as our merchant of record. As the seller of record, Creem collects and processes your payment details, calculates and remits applicable taxes including EU VAT, issues invoices and receipts, and handles payment-related requests. We never receive or store full card details. What reaches us is limited billing status, such as which plan you are on and whether the subscription is live, which is what unlocks the product. Creem's own privacy policy governs the payment data it holds.

Who handles it for us

Clerk (sign-in and accounts), Google (if you choose Google sign-in), Microsoft Azure (hosting and database), Creem (payments, as merchant of record: it takes and stores your card, we never see it), Resend (the emails we send you) and DataFast (which visit led to a subscription), a data provider that fetches public web and Reddit pages on our behalf, and language-model providers that process product descriptions and public posts to score leads. Slack, Discord or Telegram receive alerts only if you connect them. Each processes data only to provide its service to us.

Retention and your choices

We keep account data while your account is open. Email [email protected] to access, correct, export or delete your data, or to close your account; we act on these requests within 30 days. You can remove an alert channel or disconnect a wallet or Slack at any time in settings.

Cookies

We use cookies that keep you signed in, and two first-party analytics cookies: one for product analytics and one that records which visit led to a subscription, so we know what is worth doing again. Neither is sold, shared with advertisers, or used to build a profile of you elsewhere. We use no advertising cookies.

International transfers

Some of these providers are in the United States or elsewhere, so your data may be processed outside your own country. Where that is the case the transfer relies on the safeguards those providers offer, such as the EU Standard Contractual Clauses.

Security

Each account's data is isolated in the database, the API keys and connected-account tokens you add are encrypted at rest, and traffic is served over TLS. No system is perfectly secure, but these are the measures we take.

Your rights

You can access, export, correct or delete your data. Depending on where you live you may have further rights under the GDPR or the CCPA, including objecting to or restricting some processing, and lodging a complaint with your data-protection authority; in Poland that is the President of the Personal Data Protection Office (UODO). To exercise any of them, write to [email protected].

Children

The service is not intended for anyone under 16, and we do not knowingly collect their data.

Changes

If this policy changes in a way that matters, we will update the date above and tell account holders by email.