Privacy Policy

1. What this policy covers

This policy explains how IntelTrack("we", "us") handles personal data when you visit our website, create an account, or use the competitive-intelligence service. It covers the data flows created by the waitlist signup, account creation, billing, and competitor-monitoring features of the product, as well as the cookies and analytics on our marketing pages.

The "Last updated" date at the top of this page is the effective date of the current version. This page is informational and not a substitute for legal advice; have a lawyer review it before launch.

2. Information we collect

We collect the minimum information needed to run the service and to bill you for it. In detail:

Account data

When you register we collect your email address and a password. The password is stored as a one-way hash; we cannot see the plaintext. We also store your email-verification status and session metadata (login time, last-active time, session expiry) so you stay signed in and we can authenticate your requests.

Billing data

Checkout is hosted by Stripe on Stripe's servers. Stripe collects the billing name, email, and card details you enter there. IntelTrack receives only the Stripe customer ID, the subscription ID, the plan you chose, and the billing events Stripe sends us (payment succeeded, renewed, cancelled). We never see or store your full card number on our infrastructure.

Competitor list and observations

You tell us which competitors you want monitored by submitting URLs and display labels. You can add notes about each competitor from the dashboard. That data is associated with your account and is visible only to you (and to a small number of authorised IntelTrack operators bound by access controls).

Scraped competitor content

Our crawler fetches publicly accessible pages of the competitors you nominate, extracts the visible text and any detected prices, computes a hash of the normalised text, and discards the raw HTML. We store the URL, the fetched timestamp, the extracted text, the detected price string, and the hash so we can detect changes and present you with a comparison. The dashboard links you back to the source page so you can verify any change.

Cookies and local storage

We use a single anonymous visitor identifier stored in your browser'slocalStorageunder the keypolsia_vidfor first-party analytics. We do not place advertising cookies, and we do not embed third-party trackers on our marketing pages.

Waitlist data

If you joined the waitlist, we collected your name and email address at that time. We use that data only to email you about the product launch and the launch-day trial perk.

Transactional email

Operational emails — account verification, billing receipts, critical service notices, and product updates — are sent through our transactional-email proxy. Subjects and bodies are processed by that proxy; we log delivery metadata so we can confirm that important messages reached your inbox. We do not send third-party marketing.

3. How we use the information

We use the data described above to:

• Authenticate you and protect your account.
• Operate the competitor monitoring you requested — schedule crawls, detect changes, and generate battlecards and alerts.
• Bill you through Stripe and produce receipts.
• Send you the transactional emails described above (account verification, billing alerts, critical service notices, and product-update announcements).
• Detect abuse, debug issues, and respond to your support requests.

We do not sell personal data. We do not share personal data with advertising networks or data brokers. We may retain aggregated, de-identified usage statistics (for example, total competitors tracked across all accounts in a given week) to improve the product.

4. Competitor-scraping disclosures

Because IntelTrack's core product involves crawling other companies' websites, we want to be explicit about what we do and what we do not do:

• We crawl only publicly accessible pages. We do not sign in to competitor sites, and we do not access content behind authentication, paywalls, or anti-bot gates we cannot legitimately pass.
• We aim to honour robots.txt exclusions where a site declares them. Where honouring a site-wide robots.txt is impractical for a particular URL, we still apply reasonable rate limits and a clear user-agent string so a site owner can identify us and reach out.
• We keep only the extracted text and a hash of the change set — not the raw HTML. The dashboard exposes the source URL and timestamp for every snapshot so you can verify them yourself.
• We do not scrape a competitor’s customer list, end-user accounts, or any personal data we encounter en route. If such data is incidentally captured, we treat it as a bug and purge it.

If you operate a website and would like your pages excluded from our crawl, email inteltrack@polsia.app and we will apply the exclusion across our crawl pool. We aim to honour opt-out requests within five (5) business days.

5. Sharing and processors

We do not sell your personal data. The limited set of third-party processors that handle data on our behalf is:

• Stripe — processes payments and stores the billing data you enter at checkout on Stripe’s servers.
• Our transactional-email proxy — sends operational emails on our behalf.
• Our database host and our application-deploy platform — store account data, your competitor list, and the extracted snapshots needed to operate the service.

Each processor is bound by a data-processing agreement that limits its use of the data to providing the contracted service to us.

6. Data retention

We keep data only as long as we need it to run the service, comply with legal obligations, or resolve disputes:

• Account data, your competitor list, and your notes — for the life of your account, plus 30 days after deletion to recover from an accidental closure.
• Scraped text and hash snapshots — up to 12 months rolling, so we can show meaningful change-history in the dashboard.
• Waitlist data — until product launch plus 90 days. After launch we delete waitlist records other than a per-account conversion record.
• Billing records — for the period required by applicable tax and accounting law in the operating jurisdiction.

7. Security

We take reasonable steps to protect your data: TLS in transit, hashed passwords (so a database compromise alone does not expose plaintext credentials), access controls on the production database, and per-user scoping in every authenticated route handler so a query cannot return another tenant's data by accident. No system is perfectly secure, and we cannot guarantee absolute security.

8. Your rights

Depending on where you live, you may have rights to access the personal data we hold about you, request correction of inaccurate data, request deletion, request a portable copy of your data, or lodge a complaint with a supervisory authority in your jurisdiction. To exercise any of these rights, email inteltrack@polsia.app. Specific procedures (response windows, identification requirements, and the supervisory authority reference for the operating jurisdiction) will be filled in by counsel pre-launch.

9. Children's privacy

IntelTrack is not directed at children under 16, and we do not knowingly collect personal data from anyone under 16. If you believe a child has signed up using your email or has otherwise provided personal data to us, contact inteltrack@polsia.app and we will delete the record.

10. Changes to this policy

We may revise this policy. The "Last updated" date at the top of this page is the effective date of the current version. For material changes that affect what we collect or how we use it, we will email active subscribers at least thirty (30) days before the change takes effect.

11. Contact

Questions about this policy, your data, or your rights should go to inteltrack@polsia.app.