Privacy Policy

Last updated: May 18, 2026

1. What we collect

• Account data: email, name, password hash, Google account ID (if you sign in with Google).
• Project data: domain names you choose to scan, scan results, prompts and AI responses, score history.
• Billing data: subscription plan, credit usage. Payment details are processed by our payment provider and never stored on our servers.
• Usage data: pages viewed, features used, performance metrics. Used to improve the product.

2. How we use it

• To deliver scans and the features you sign up for.
• To send transactional emails (account, billing, weekly digests if enabled).
• To improve the Service via aggregated analytics.
• To comply with legal obligations.

We do not sell your data. We do not use your scan data to train AI models.

3. Subprocessors

We rely on the following service providers to operate RIPstartup:

• Lovable Cloud (Supabase): database, authentication, file storage.
• Lovable AI Gateway: AI model inference (Google Gemini, OpenAI GPT).
• Firecrawl: public-page crawling for SEO audits.
• Cloudflare: CDN and edge compute.
• Sentry & PostHog (optional): error tracking and product analytics.

4. Data retention

Active accounts: data is retained while your subscription is active. Cancelled accounts: data is retained read-only for 30 days, then permanently deleted. You can request earlier deletion via email.

5. Your rights (GDPR / CCPA)

You have the right to access, correct, export, or delete your personal data. To exercise these rights, email privacy@ripstartup.com. We respond within 30 days.

6. Cookies

We use cookies and localStorage for authentication sessions, theme preference, and (if enabled) analytics. You can disable cookies in your browser, but the Service may not function correctly without them.

7. Security

We use industry-standard encryption in transit and at rest. Row-level security enforces that each user can only access their own data. No system is 100% secure — please use a strong, unique password.

8. Children

The Service is not intended for users under 16. We do not knowingly collect data from children.

9. International transfers

Your data may be processed in the United States and the European Union. We rely on standard contractual clauses where required.

10. Changes

We may update this policy. Material changes will be announced via email or in-app notice at least 14 days in advance.

11. Contact

Privacy questions: privacy@ripstartup.com

Also see our Terms of Service.