Privacy Policy

Kompetar is operated by Vynapse (vynapse.ai), which serves as the data controller for the personal information collected through this service.

Account information: When you create an account, we collect your name, email address, and password (stored as a bcrypt hash, never in plain text).

Competitor data: The competitor names, domains, and page URLs you add to your workspace. We also store snapshots of publicly available competitor web pages that you choose to monitor.

Usage data: Basic usage information such as login timestamps and feature interactions to improve the product experience.

Alert preferences: Your notification settings including Slack webhook URLs and email preferences.

We use the information we collect to:

• Provide, operate, and maintain the Kompetar service
• Monitor competitor pages you have selected and detect changes
• Generate AI-powered summaries and classifications of detected changes
• Send alerts via your configured channels (Slack, email)
• Authenticate your account and secure your workspace
• Communicate service updates and respond to support requests

We use the following third-party services to operate Kompetar:

• Paddle.com Market Ltd as our Merchant of Record for payment processing, subscription management, invoicing, and global sales tax compliance. When you subscribe to a paid plan, Paddle collects your payment details and billing address. Paddle's privacy policy applies to payment data they process.
• Anthropic (Claude API) for AI-powered analysis and classification of competitor changes. Page content is sent to the API for processing but is not stored by Anthropic for training purposes.
• Resend for transactional email delivery including alerts and account notifications.
• Slack for delivering alerts via incoming webhooks you configure. We only send data to the webhook URL you provide.

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

Your data is stored in a PostgreSQL database with encryption at rest. Passwords are hashed using bcrypt with a minimum work factor of 12. Authentication uses JWT tokens with short-lived access tokens and rotating refresh tokens.

We implement industry-standard security measures including HTTPS encryption, parameterized database queries (preventing SQL injection), and rate limiting on API endpoints.

We retain your data according to the following schedule:

If you delete your account, we will remove your personal information and all workspace data (competitors, pages, snapshots, changes, alert preferences, and alert logs) within 30 days. Authentication tokens are revoked immediately. Some anonymized, aggregated data may be retained for product improvement purposes.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your data in a machine-readable format
• Withdraw consent for optional data processing

To exercise any of these rights, contact us at support@kompetar.com

Kompetar monitors only publicly accessible web pages that you explicitly select. We do not access password-protected content, private APIs, or any non-public resources. Our monitoring is functionally equivalent to a user visiting a public webpage in a browser.

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through a prominent notice on the service. Continued use of Kompetar after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, contact us at support@kompetar.com