Privacy Policy

ScrapRival ("we", "us") is an independent product operated by a sole founder based in Spain. This policy explains what personal data we collect, why, and the rights you have over it under the EU General Data Protection Regulation (GDPR).

What we collect

• Account data: your email address, an optional name, an optional description of your company, and your timezone.
• Product configuration: the competitors, URLs and industry sources you choose to monitor.
• Usage data: product analytics events (pages visited, features used) and error reports, to improve the product.
• Payment data: handled entirely by Lemon Squeezy, our merchant of record. We never see or store your card details.

How we use it

• To operate the service: monitor the sources you configure and send you your weekly briefing and the alerts you opt into.
• To personalize AI-generated summaries using your company description.
• To bill your subscription, prevent abuse, and provide support.
• To understand product usage and fix errors.

Legal bases: performance of contract (the service itself), legitimate interest (analytics, error monitoring, abuse prevention), and consent where required. We do not sell your data, ever.

What we monitor on your behalf

ScrapRival fetches publicly available web pages and RSS feeds that you configure. Our crawler identifies itself with its own User-Agent. Scraped content belongs to its respective owners and is processed only to detect changes and produce your briefing.

Subprocessors

We rely on these providers to run the service:

• Supabase — database and authentication
• Vercel — hosting and cookieless web analytics
• Anthropic — AI processing of scraped public content and your company description (not used to train their models)
• Resend — email delivery
• Lemon Squeezy — payments and invoicing (merchant of record)
• PostHog (EU) — product analytics
• Sentry — error monitoring

International data transfers

Some of the providers above are US companies (Vercel, Anthropic, Resend, Sentry), so limited personal data may be processed outside the European Economic Area. These transfers rely on the safeguards the GDPR requires — the EU–US Data Privacy Framework and/or Standard Contractual Clauses, per each provider's data processing agreement. Product analytics (PostHog) and our database (Supabase) are hosted in the EU.

Cookies

We use essential cookies to keep you signed in (Supabase auth) and to remember your cookie choice; these are always active because the app cannot work without them. With your consent, we also use analytics cookies (PostHog, EU) to understand product usage — PostHog does not load until you accept. We additionally use Vercel Web Analytics, a cookieless service that stores no identifiers on your device and runs without consent. You can accept, reject, or change your choice anytime via "Cookies" in the footer. No advertising cookies.

Retention and deletion

Account and product data are kept while your account exists. To delete your account and its data, email us and we will remove them within 30 days, except records we must keep for legal or billing reasons.

Your rights

You can request access, rectification, erasure, portability, or restriction of your personal data at any time by writing to hello@scraprival.com. You also have the right to lodge a complaint with your supervisory authority (in Spain, the AEPD).

Changes

If this policy changes materially, we will notify you by email before the changes take effect.