1. Controller
Global Software Development, Romania, is the data controller for personal data processed through aipricingaudit.com.
2. Data We Collect
- Account data: email address and hashed password, stored in Supabase.
- Payment data: billing details handled entirely by Stripe — we never store card numbers.
- Audit inputs: URLs you submit for analysis.
- Scraped content: raw HTML from submitted URLs, deleted after report generation.
- Structured report data: AI-extracted pricing information retained to display your reports.
- Usage logs: IP address, timestamps, and request metadata for security and rate-limiting.
3. How We Use Your Data
- To provide, operate, and improve the Service.
- To authenticate you and protect your account.
- To process payments via Stripe.
- To send transactional emails (audit complete, billing receipts).
- We do not sell your data, share it with advertisers, or use it to train AI models.
4. Scraped Third-Party Content
The URLs you submit point to publicly available web pages. The scraped HTML is processed in memory and deleted immediately after the report is generated. Only structured, AI-extracted data (tier names, prices, features) is stored — no competitor page HTML is retained long-term.
5. Data Retention
- Account data: retained until you delete your account.
- Raw scraped HTML: deleted immediately after report generation.
- Audit reports and structured data: retained for 24 months or until account deletion.
- Usage logs: retained for 90 days.
6. Third-Party Processors
- Supabase — database and authentication (EU region).
- Stripe — payment processing.
- Anthropic — AI analysis (your URLs and extracted pricing text are sent; no personal data).
- Railway — backend hosting.
- Cloudflare — CDN, DNS, and DDoS protection.
7. Your Rights (GDPR)
As an EU resident you have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing. To exercise any right, email support@aipricingaudit.com. We will respond within 30 days.
8. Cookies
We use only essential session cookies set by Supabase for authentication. No analytics or advertising cookies are used.
9. Security
All data is transmitted over HTTPS. Database access is restricted to server-side service role keys. We apply rate limiting and input validation to prevent abuse.
10. Changes
We may update this policy. Significant changes will be notified by email. Continued use of the Service constitutes acceptance.