Privacy policy

This policy explains what we collect when you use ReddScale, its free tools and its Chrome extension, and what we do with it.

What we collect

Account data. Your name, email address, password (stored only as a secure hash by our authentication provider), the organisations you belong to and your role in them.

Content you add. Brand and competitor details, prompts, knowledge base material, campaign settings, reply drafts and comments.

Free tool data. For the AI visibility check: your brand name, website, work email and your consent choices. For both free tools: a one-way hash of your network address, used only to limit abuse. We don't store the address itself.

Reddit account details from the extension. When you open Reddit with the extension connected, it sends us your Reddit username, karma, account creation date and whether your Reddit email is verified, so we can warn you about community requirements. When you post a reply that started as a ReddScale draft, it sends us the comment and post IDs so we can show the reply's status. The extension does not read or send anything else from your browsing.

Billing data. Handled by Stripe. We receive your plan and billing status; card details stay with Stripe.

Contact form. Your name, email, company and message.

Technical data. Server logs with request times, pages requested and errors, kept to run and secure the service.

Why we use it

• To provide the service you signed up for, which is the legal basis of contract.
• To send service emails such as reports, alerts, trial reminders and billing notices.
• To prevent abuse and keep the service secure, which is our legitimate interest.
• To send product news, only if you opted in. You can unsubscribe at any time.

We don't sell personal data and don't use it for advertising.

Who processes it

We share data only with providers that help us run ReddScale:

• Supabase, for database and authentication.
• Our hosting provider, for application servers.
• Stripe, for payments.
• Resend, for email delivery.
• Google Analytics, for visit statistics on our public pages, only if you accept optional cookies.
• AI model providers (OpenAI, Anthropic, Google and Perplexity), which receive prompts and the text needed to generate answers and drafts. We use their business APIs, whose terms restrict using API data for training.
• Reddit, through its official Data API, to read public posts and community rules.
• Integrations you choose to connect, such as Slack or WordPress.

Where it's stored

[Hosting and database regions, and the safeguards used for any transfers outside your country, to be completed.]

How long we keep it

• Account data and content: while your account is open, then deleted within 30 days of closure, except where we must keep records by law, such as invoices.
• Free check results: 90 days.
• Network address hashes: 30 days.
• Reddit mentions we track for you: 180 days. Text and author names of Reddit threads: cleared 30 days after we last fetched them, unless you have a draft reply waiting. Content removed or deleted on Reddit is dropped when we next see it.
• Server logs: 30 days.

Your rights

Depending on where you live, you can ask to access, correct, delete or export your data, object to or restrict how we use it, and withdraw consent. Email [email protected]. You can also complain to your local data protection authority.

Cookies

See the cookie policy.

Changes

We'll post updates here and email account owners about material changes.

[Data controller legal name, address and any representative or DPO details to be completed.]