Privacy Policy
- We collect what we need to run your account: your name, work email, company website and the competitors you track. There are no passwords: you sign in with a one-time code sent to your email.
- The research we produce is about businesses, built from public sources.
- We never sell your information and never use it for advertising.
- We send business information (not your account details) to our AI provider to produce research. It is not used to train AI models.
- You can ask us to access, correct or delete your information at any time.
1. Who we are
Competevo is operated by LoomTech Ventures LLC, a California limited liability company ("we", "us", "our"). This policy explains how we handle personal information when you visit our website or use the Competevo application (together, the "Service").
For the purposes of data protection law (including the GDPR and the CCPA), LoomTech Ventures LLC is the controller of the personal information described here. You can reach us through our contact form.
2. Information we collect
2.1 Account information
When you create an account we collect your name and work email address. We don't use passwords: each time you sign in we email you a one-time code that works for 15 minutes, and we store only a one-way hash of it. If someone on your team invites a colleague, we store the colleague's email address and the invitation until it is accepted, withdrawn or expires, and their name once they join.
2.2 Workspace and setup information
To set up your workspace we collect your company name, company website, your time zone (taken from your browser so overnight updates run at night for you), and the competitors you choose to track. If you use the sign-up form on our website, we also collect the CRM you tell us you use.
2.3 Research we produce for you
The Service produces research about businesses: competitor profiles, comparisons, market and strategy research, battlecards, change summaries, alerts and briefs. This research is written by AI from public sources and stored in your workspace.
2.4 Public information about competitors
We capture and compare the public web pages of the companies you track (for example pricing, product, comparison, customer, careers and blog pages), read public reviews about them, and search the web for news about them and their market. These are business sources, but public pages and reviews can incidentally contain personal information, such as an executive's name or a reviewer's quote. We use it only to describe the company being researched.
2.5 Usage and technical information
When you use the Service we record technical information needed to run and secure it: IP address, browser and device type, the pages and features you use, timestamps, errors, and security events such as sign-ins and team changes.
2.6 Email
We send account emails (such as sign-in codes and team invitations) and the alerts, digests and briefs that are part of the Service. Our email provider tells us whether a message was delivered or bounced.
2.7 Messages you send us
If you use our contact form, we collect your name, email address, company (if you give it) and your message, and use them only to reply to you and keep a record of the conversation.
2.8 Payment information
Paid plans are billed through our payment processor, Stripe. Stripe collects and processes your card details; we receive only billing records such as your plan, amounts, dates and a payment reference. We never receive or store your full card number or security code.
2.9 How you use our website
To improve our website, we record how each visit goes. A visit is one browser tab, identified by a random code that stays in that tab and ends when you close it. For each visit we record:
- where it came from: the campaign tags in the link (such as utm_source), whether it was an ad click, and the referring site's name;
- the pages you open, which parts of a page you scroll to, and how long each page is in front;
- the text of the links and buttons you click (never anything you type);
- whether you use a desktop, phone or tablet.
We don't record your IP address or browser details for this, and we can't link a visit to you unless you sign up during it. If you do, the visit is kept with your new account so we know which channels and pages bring customers.
3. How we use your information
- To provide the Service: run your workspace, monitor the competitors you track, produce research, and show it to you and your team.
- To communicate with you: account emails, the alerts, digests and briefs you receive, billing notices, and important changes to the Service or these policies.
- To bill you: manage your plan, trial and payments.
- To keep the Service secure: authenticate sign-ins, prevent fraud and abuse, and investigate incidents.
- To maintain and improve the Service: fix problems, monitor performance and understand which features are used.
- To meet legal obligations: comply with law, tax and accounting rules, and lawful requests.
We do not sell your personal information, use it to build advertising profiles, or use it for automated decisions that have legal or similarly significant effects on you.
4. Legal bases for processing
If you are in the European Economic Area or the United Kingdom, we rely on these legal bases:
- Contract: to provide the Service you signed up for, including your account, workspace, research and billing.
- Legitimate interests: to secure and improve the Service, prevent abuse, and research the public information of the companies you track. We have assessed that these interests are not overridden by the rights of the people concerned.
- Consent: for optional communications such as product news. You can withdraw consent at any time.
- Legal obligation: where the law requires us to keep or disclose information.
5. AI processing
Competevo uses AI models from Anthropic to analyse changes and write research. To do that we send Anthropic business information:
- your company name and website, and the names and websites of the competitors you track;
- the text of competitor pages we captured and the changes we detected;
- earlier research in your workspace that new research builds on;
- the short description of your company we keep for your workspace.
For research and news, Anthropic's web search and page-reading tools run searches and read public pages on our behalf. The searches name the companies you track and your market; they do not include personal information about you or your team.
We do not send your sign-in codes, payment details, or your team's names and email addresses. Anthropic processes this data under its commercial terms, which do not permit training its models on it. Anthropic may keep inputs and outputs for a limited period for trust and safety purposes, as described in its own privacy documentation.
AI-written research can contain mistakes. See our Terms of Service for how it should and should not be relied on.
6. Service providers
We use a small number of providers, each receiving only what it needs:
| Provider | What they do | What they receive |
|---|---|---|
| Anthropic | AI analysis and research | The business information described in section 5 |
| Amazon Web Services | Hosting, database, file storage and email delivery | The data stored in the Service; the email address and content of messages we send you |
| Stripe | Payments and billing | Your billing details and card information, which you give to Stripe directly |
| Google Fonts | Serves the fonts on our website | Your IP address and browser details when a page loads the fonts |
Our providers may use the data only to provide their service to us and must protect it in line with applicable law.
7. When we share information
- Within your workspace: members of your workspace can see the workspace, its competitors and its research.
- Service providers: as described in section 6.
- Legal reasons: when required by law or valid legal process, or to protect the rights, safety or property of our users, the public or us.
- Business transfers: if we are involved in a merger, acquisition or sale of assets. We will tell you before your information becomes subject to a different privacy policy.
We do not share your information in any other way.
8. Cookies
We use one cookie, and it is strictly necessary:
| Cookie | Purpose | Duration |
|---|---|---|
cv_auth | Keeps you signed in to the application. HttpOnly, Secure, SameSite=Strict. | 14 days, renewed while you are active |
We do not use analytics or advertising cookies. The visit code (section 2.9) is kept in your browser tab's session storage, not a cookie, and is cleared when you close the tab. If we add analytics or advertising cookies in future, we will update this policy and, where the law requires, ask for your consent before setting them.
Browsers' "Do Not Track" signals have no agreed standard, so we do not change our behaviour in response to them. Because we set no tracking cookies, this makes no practical difference today.
9. How long we keep information
| Information | How long |
|---|---|
| Account and workspace information | While your account is open. Deleted or anonymised within 30 days after your account is closed. |
| Research in your workspace | While your account is open. We keep the current version of each research document and up to five earlier versions, so you can see how things changed. |
| Captured competitor pages and change history | While needed to show history in the Service. This history is a core part of what the Service provides. |
| News stories found for your workspace | 6 months. |
| Website visits (section 2.9) | 6 months. |
| Security and activity logs | Up to 12 months. |
| Backups | Kept for up to 90 days for recovery, then deleted. |
| Billing records | As long as tax and accounting law requires, typically 7 years. |
10. International transfers
We are based in the United States, and the Service and our providers process data in the United States. If you are in the EEA, UK or Switzerland, we transfer your personal information to the United States using appropriate safeguards, such as the European Commission's Standard Contractual Clauses.
11. Security
We protect your information with measures including encryption in transit (TLS) and at rest, one-time sign-in codes stored only as one-way hashes, sign-in cookies that page scripts cannot read and other sites cannot send, private file storage, and access to production systems limited to people who need it. No system is perfectly secure; if a breach affects your personal information, we will notify you as the law requires.
12. Your rights
Wherever you are, you can ask us to:
- access the personal information we hold about you;
- correct inaccurate information;
- delete your information;
- export your information in a portable format;
- restrict or object to certain processing, including processing based on legitimate interests;
- withdraw consent where we rely on it.
EEA and UK residents can also complain to their local data protection authority. California residents have the right to know, delete and correct personal information, and not to be discriminated against for exercising these rights, and may use an authorised agent to make a request. We do not sell personal information or share it for cross-context behavioural advertising, so there is nothing to opt out of. Residents of other US states with privacy laws (such as Colorado, Connecticut, Oregon, Texas and Virginia) have similar rights to access, correct, delete and port their information, and to appeal if we decline a request: reply to our decision and we will review it.
To make a request, use our contact form and choose "Privacy or my data". We may need to verify your identity. We respond within 30 days and do not charge for requests.
13. Children
The Service is for businesses and is not directed at anyone under 16. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.
14. Changes to this policy
We may update this policy. We will change the date at the top of the page, and for material changes we will email account holders at least 14 days before they take effect.
15. Contact us
LoomTech Ventures LLC (Competevo). Send us a message through our contact form and choose "Privacy or my data".