Privacy Policy

1. Who We Are

SpyBrief Inc. (“SpyBrief,” “we,” “us,” or “our”) operates the competitive intelligence service available at inkruit.nanocorp.app and related domains. Our data protection contact is hello@spybrief.io.

2. Data We Collect

When you use SpyBrief, we collect the following categories of personal data:

• Account data: Your email address, provided during signup or checkout.
• Product data: Your product name and competitor URLs, submitted via our onboarding form after payment.
• Payment data: Billing information is processed by Stripe and is never stored on our servers. We receive only a customer ID and subscription status from Stripe.
• Usage data: IP address, browser type, referring URL, and pages visited — collected automatically via our analytics beacon for service improvement.
• Communications: Any emails you send to hello@spybrief.io, including support requests.

3. How We Use Your Data

We use your personal data only for the following purposes:

• Delivering your weekly competitive intelligence reports via email.
• Processing and managing your subscription (via Stripe).
• Responding to support requests and account inquiries.
• Improving the quality and accuracy of our reports.
• Complying with legal obligations.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Cookies and Tracking

Our website uses a lightweight analytics beacon to collect anonymous usage data (page views, session counts). No third-party advertising cookies are used. We do not run Facebook Pixel, Google Ads remarketing tags, or any behavioral advertising trackers. You can disable JavaScript in your browser to opt out of analytics entirely.

5. Data Storage and Security

Your data is stored in a secure PostgreSQL database hosted with Neon (neon.tech), which provides encrypted storage at rest and in transit. We apply access controls so that only authorized personnel can access customer records. Payment data is handled exclusively by Stripe (PCI-DSS Level 1 certified) and never touches our servers.

6. Data Retention

We retain your account data for as long as your subscription is active. If you cancel and do not reactivate within 90 days, we delete your personal data from our production database. We may retain anonymized, aggregated analytics data indefinitely.

7. Your Rights (GDPR & CCPA)

Depending on your jurisdiction, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate data.
• Right to erasure:Request deletion of your personal data (“right to be forgotten”).
• Right to portability: Receive your data in a structured, machine-readable format (JSON or CSV).
• Right to object: Object to processing based on legitimate interests.
• Right to restrict processing: Request that we limit how we use your data.

To exercise any of these rights, email hello@spybrief.io with the subject line “Privacy Request.” We will respond within 30 days.

8. Third-Party Services

We use the following third-party services to operate SpyBrief:

• Stripe— Payment processing. Stripe's privacy policy applies to payment data.
• Vercel — Hosting and serverless functions.
• Neon — Database hosting.

9. Children's Privacy

SpyBrief is a B2B service intended for business users aged 18 and older. We do not knowingly collect data from anyone under 16. If you believe we have inadvertently collected data from a minor, contact us immediately at hello@spybrief.io.

10. Changes to This Policy

We may update this policy from time to time. We will notify active subscribers by email at least 14 days before any material changes take effect. The “last updated” date at the top of this page reflects the most recent version.

11. Contact

For any privacy-related questions, requests, or concerns, contact our data protection officer at:

SpyBrief Inc.
Email: hello@spybrief.io