Privacy Policy — Analook

1. Introduction

Analook ("Service"), operated by Gingiris, respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address and authentication credentials (managed via Supabase). We do not store passwords directly.

2.2 Usage Data

We collect information about how you use the Service, including:

URLs and product names you submit for analysis
Generated reports and their metadata
Credit usage and transaction history
Browser type, IP address, and access timestamps

2.3 Payment Information

If you make a purchase, payment processing is handled by our third-party payment provider. We do not store credit card numbers or banking details on our servers.

3. How We Use Your Information

To provide and improve the Service
To generate competitive analysis reports based on your queries
To manage your account, credits, and access
To communicate important updates about the Service
To detect and prevent fraud or abuse
To comply with legal obligations

4. Data Sources

The Service analyzes publicly available information from sources including:

Public websites via the Wayback Machine and direct access
Public social media profiles (Twitter/X, Reddit, GitHub, etc.)
Public SEO and traffic data via DataForSEO
Product Hunt public listings
Google Trends public data
Public news articles and press releases

We only collect and process publicly available data. We do not access private accounts, internal systems, or confidential information of the companies being analyzed.

5. Data Storage and Security

Your data is stored on servers operated by Railway (hosting) and Supabase (authentication and database). We implement reasonable security measures to protect your information, including encrypted connections (HTTPS) and access controls.

Generated reports are stored on our servers and may be accessible via shareable links. You are responsible for controlling who you share report links with.

6. Third-Party Services

We use the following third-party services that may process your data:

Supabase — Authentication and user management
Railway — Application hosting
DataForSEO — SEO and traffic analysis
Apify — Data collection from public sources
Brave Search API — Web search functionality

Each third-party service has its own privacy policy governing data processing.

7. Data Retention

We retain your account data for as long as your account is active. Generated reports are retained indefinitely unless you request deletion. Usage logs are retained for up to 12 months for analytics purposes.

8. Your Rights

You have the right to:

Access — Request a copy of the personal data we hold about you
Correction — Request correction of inaccurate data
Deletion — Request deletion of your account and associated data
Portability — Request your data in a machine-readable format
Objection — Object to certain types of data processing

To exercise these rights, contact us at iris.wei@gingiris.com.

9. Cookies

The Service uses essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies.

10. Children's Privacy

The Service is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children.

11. International Data Transfers

Your data may be processed in countries outside your country of residence, including the United States and Singapore. We ensure that appropriate safeguards are in place for such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Service or email. The "Last updated" date at the top indicates when the policy was most recently revised.

13. Contact

For privacy-related inquiries, contact us at: iris.wei@gingiris.com