130 lines
5.3 KiB
Markdown
130 lines
5.3 KiB
Markdown
<!--
|
|
DRAFT — not legal advice. This is a starting point built directly from
|
|
CLAUDE.md §22's stated requirements (what must be disclosed, retention
|
|
periods from DATA_RETENTION, deletion process, data region) plus
|
|
standard SaaS privacy-policy structure. Have this reviewed by an
|
|
actual lawyer before publishing to bettersight.io/privacy — GDPR/CCPA
|
|
compliance, the exact subprocessor list, and the governing-law/contact
|
|
details below all need a real legal review pass, not just an LLM pass.
|
|
|
|
Fields marked [BRACKETED] need your input before this is ready to publish.
|
|
-->
|
|
|
|
# Bettersight Privacy Policy
|
|
|
|
**Last updated:** [DATE]
|
|
|
|
Bettersight ("Bettersight," "we," "us," or "our") is operated by
|
|
Undo Designs LLC. This policy explains what data we collect from you
|
|
(the paying client and your team, collectively "you" or "PM"), why we
|
|
collect it, how long we keep it, and how you can request its deletion.
|
|
|
|
## 1. What We Collect
|
|
|
|
**Account and identity data**
|
|
- Your name and email address (used for login, licence validation,
|
|
and billing)
|
|
- Your organisation's domain (used to validate team member access)
|
|
- Your timezone (captured automatically from your browser on first
|
|
login, used only to send your daily/weekly briefs at the right
|
|
local time)
|
|
|
|
**Usage data**
|
|
- Competitor websites and catalogue URLs you add to your account
|
|
- Research job history (destinations, durations, travel styles you've
|
|
searched, and the resulting job records)
|
|
- Login and session activity, for security and support purposes
|
|
|
|
**Payment data**
|
|
- Billing is handled entirely by Stripe. We never see or store your
|
|
card number — Stripe stores your payment method and shares with us
|
|
only your subscription status, tier, and billing history.
|
|
|
|
**Competitor and market data**
|
|
- Bettersight scrapes publicly available pages from competitor
|
|
websites you specify, extracting pricing and trip information. This
|
|
data describes third-party businesses' public offerings — it is not
|
|
personal data about you, and it is not obtained from any
|
|
password-protected or non-public source. See our
|
|
[Terms of Service](/terms) for the full scraping policy.
|
|
|
|
## 2. Why We Collect It
|
|
|
|
We use your data solely to operate Bettersight: authenticating you,
|
|
running the competitive analyses you request, sending you the alerts
|
|
and briefs you've configured, and processing your subscription
|
|
payment. We do not sell your data, and we do not use it to train any
|
|
third-party AI model beyond the narrow, per-request use described in
|
|
Section 4.
|
|
|
|
## 3. How Long We Keep It
|
|
|
|
| Data | Retention |
|
|
|---|---|
|
|
| Research job records (scrape_runs) | 90 days |
|
|
| Price history | 365 days |
|
|
| Read/dismissed alerts | 90 days (unread alerts are kept until you read them) |
|
|
| Your account and account data generally | Retained until you request deletion (Section 6) |
|
|
|
|
Unread alerts, your competitor list, and your account itself are kept
|
|
for as long as your subscription is active, since they are the core
|
|
data your subscription exists to maintain.
|
|
|
|
## 4. Who We Share It With
|
|
|
|
We use the following subprocessors to operate Bettersight. Each
|
|
processes only the minimum data needed for its function:
|
|
|
|
| Subprocessor | Purpose | Data shared |
|
|
|---|---|---|
|
|
| Stripe | Payment processing | Your name, email, payment method |
|
|
| Resend | Transactional email delivery | Your email address, email content |
|
|
| OpenRouter | AI extraction and analysis of scraped competitor pages | Scraped competitor page content only — never your personal data |
|
|
| Sentry | Error monitoring | Technical error data, with your email address stripped before it reaches Sentry |
|
|
| Hetzner | Server hosting and database storage | All account and usage data (see Section 5 — data location) |
|
|
| Webshare / Bright Data | Proxy infrastructure for scraping competitor pages | No personal data — used only to route scraping traffic |
|
|
|
|
We do not share your data with any other third party, and we do not
|
|
sell it.
|
|
|
|
## 5. Where Your Data Is Stored
|
|
|
|
Bettersight's servers and database are hosted on Hetzner
|
|
infrastructure in the EU region. Backups are stored in Hetzner Object
|
|
Storage, also in the EU.
|
|
|
|
## 6. Your Rights and How to Request Deletion
|
|
|
|
You may request permanent deletion of your account and all associated
|
|
data at any time by emailing **support@bettersight.io** or using the
|
|
delete option in your Account settings. On request, we will:
|
|
|
|
- Cancel your active subscription
|
|
- Permanently delete your competitors, tracked products, price
|
|
history, alerts, battlecards, comparable trip matches, and your
|
|
account record itself
|
|
- Send you a confirmation email once deletion is complete
|
|
|
|
Deletion is permanent and cannot be undone. If you are in the EU/UK,
|
|
you have the right under GDPR to request a copy of your data, request
|
|
correction of inaccurate data, or object to processing — contact
|
|
support@bettersight.io for any of these requests.
|
|
|
|
## 7. Cookies and Tracking
|
|
|
|
Bettersight's dashboard uses only the session cookie/token required to
|
|
keep you logged in. We do not use third-party advertising or tracking
|
|
cookies.
|
|
|
|
## 8. Changes to This Policy
|
|
|
|
We'll update the "Last updated" date above if this policy changes
|
|
materially, and notify active clients by email of any change that
|
|
affects how their data is used.
|
|
|
|
## 9. Contact
|
|
|
|
Questions about this policy or your data: **support@bettersight.io**
|
|
|
|
[Undo Designs LLC — company address / registration details]
|