This Privacy Policy explains how Refresh Digital LLC DBA Compete Scan (“CompeteScan”, “we”, “us”, or “our”) collects, uses, shares, and protects personal information when you use our websites, applications, and related services (the “Service”). By using the Service, you acknowledge this Policy. For terms governing use of the Service, see our Terms of Service.
1. Who we are / contact
Controller / business responsible for this Policy:
Refresh Digital LLC DBA Compete Scan
221 Main St Ste N
Nashua, NH 03060
USA
Email: team@competescan.com
2. Scope
This Policy applies to personal information we process in connection with the Service, including marketing pages, account registration, scans, dashboards, billing, and support. It does not apply to third-party websites or AI platforms that we do not control.
3. Information we collect
3.1 Information you provide
- Account and contact data: email address, name (if provided), authentication identifiers, and messages you send us.
- Business / scan inputs: domains, brand names, competitor lists, category or offering descriptions, buyer profiles, prompts, and similar business information you enter.
- Billing data: subscription plan selections and payment-related details processed by Stripe. We do not store full payment card numbers on our servers; Stripe handles card processing.
3.2 Information collected automatically
- Usage and device data: pages viewed, features used, referring URLs, timestamps, browser type, approximate location derived from IP address, and similar diagnostics.
- Cookies and similar technologies: session cookies, preference cookies (such as active workspace selection), and analytics cookies/pixels as described below.
3.3 Information from third parties
- Authentication providers: if you sign in with Google OAuth, we receive basic profile information authorized by you (such as email and name).
- Payment processor: Stripe provides payment status, customer identifiers, and related billing metadata.
- Public / scan sources: as part of providing competitive and AI-visibility analysis, we may process publicly available web information and responses returned by third-party AI platforms in connection with the domains and prompts you configure.
4. How we use information
We use personal information to:
- Provide, operate, secure, and improve the Service;
- Create and manage accounts and authenticate users;
- Run scans, generate reports/playbooks, and show workspace dashboards;
- Process subscriptions, payments, and invoices via Stripe;
- Provide customer support and respond to requests;
- Monitor performance, debug issues, and prevent fraud or abuse;
- Analyze product usage with analytics tools (including PostHog and Google Analytics);
- Send transactional messages (for example, magic-link sign-in emails and service notices);
- Send product or marketing communications where permitted (you may opt out of marketing emails);
- Comply with legal obligations and enforce our Terms.
5. Legal bases (where applicable)
If you are in a jurisdiction that requires a legal basis for processing (such as the EEA/UK), we typically rely on: performance of a contract (providing the Service); legitimate interests (securing and improving the Service, analytics, and B2B marketing where appropriate); consent (where required for certain cookies or communications); and legal obligation.
6. How we share information
We may share personal information with:
- Service providers / processors that help us run the Service, including hosting and database providers (such as Supabase), authentication infrastructure, email delivery, Stripe for payments, PostHog for product analytics, and Google Analytics for website analytics;
- Professional advisors (legal, accounting) under confidentiality obligations when needed;
- Authorities when required by law, legal process, or to protect rights, safety, and security;
- Business transfers in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality.
We do not sell personal information and we do not share personal information for cross-context behavioral advertising as those terms are commonly defined under U.S. state privacy laws (including the CCPA/CPRA). We also do not use sensitive personal information for the purpose of inferring characteristics about consumers, beyond what is needed to provide the Service.
Workspace members you invite may see Customer Content associated with that workspace according to their role.
7. Cookies and analytics
We use cookies and similar technologies for:
- Essential operations: authentication/session management and remembering workspace preferences;
- Analytics: PostHog and Google Analytics to understand how the Service is used, measure performance, and improve features.
You can control cookies through your browser settings. Blocking essential cookies may prevent sign-in or core functionality. Where required by law, we will present additional cookie consent controls.
Google Analytics and PostHog may set their own cookies or use local storage and collect device/usage data subject to their privacy policies. You can learn more about Google’s practices at Google’s Privacy Policy and about PostHog at PostHog’s Privacy Policy.
8. Data retention
We retain personal information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type and account status. When information is no longer needed, we delete or de-identify it in accordance with our practices, unless a longer period is required by law.
9. Security
We use administrative, technical, and organizational measures designed to protect personal information, including encrypted transport (HTTPS), access controls, and reliance on reputable infrastructure providers. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
10. International transfers
We are based in the United States. If you access the Service from another country, your information may be processed in the United States and other countries where we or our providers operate. Those countries may have different data-protection laws than your home country.
11. Children’s privacy
The Service is directed to business users and is not intended for children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.
12. Your privacy rights
Depending on your location, you may have rights to access, correct, delete, or export personal information; to object to or restrict certain processing; and to opt out of marketing emails. California residents (and residents of other U.S. states with similar laws) may also have rights to know, delete, correct, and opt out of “sale” or “sharing” of personal information. Because we do not sell or share personal information for cross-context behavioral advertising, there is no “Do Not Sell or Share” election to enable for that purpose at this time.
To exercise rights, email team@competescan.com. We may need to verify your request. Authorized agents may submit requests where permitted by law. You will not be discriminated against for exercising privacy rights.
If you are in the EEA/UK and have an unresolved concern, you may lodge a complaint with your local supervisory authority.
13. Do Not Track
Some browsers send “Do Not Track” signals. There is no consistent industry standard for responding to these signals; the Service does not currently respond to them in a uniform way beyond the controls described in this Policy.
14. Changes to this Policy
We may update this Privacy Policy from time to time. We will post the updated Policy on this page and revise the effective date. Material changes may also be communicated by email or in-product notice.
15. Contact
Privacy questions or requests: team@competescan.com
Refresh Digital LLC DBA Compete Scan
221 Main St Ste N
Nashua, NH 03060
USA