Privacy Policy
Last updated 9 November 2026
Information we collect
Spyfolio processes your account email and authentication information to sign you in and manage your account. If you sign in with Google, we receive basic identity information such as your name, email address, profile picture and Google account identifier. Google sign-in is used to authenticate your account; this integration does not request access to your Gmail messages, Google Drive files or calendar.
Company research and reports
We process the website you submit, public company information, Company Brain edits, selected competitors, reports and monitoring settings to provide competitor research. Your main company is linked to your account. Some researched public company profiles are stored in a shared website-based research cache; do not submit confidential information as company research.
How information is used and shared
We use account information for sign-in, account access, saved research and email delivery. If you sign in and have not started research, we may use your account email to send a one-time onboarding reminder. That email includes a link to stop onboarding reminders. Hosting providers process website requests. Authentication and database providers process sign-in information and store account and report data. Email delivery providers process recipient addresses and message content. Research requests and public website text may be sent to AI and web search providers to generate reports. Google sign-in credentials and access tokens are not included intentionally in research prompts.
Google user data
Google account information is used for authentication and account operation, not for advertising or training general-purpose AI models. Spyfolio does not sell Google user data. Any use or transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.
Cookies and analytics
Session cookies keep you signed in. Browser storage may retain pending company information and interface state. We use Google Analytics to measure website usage and interactions. See how Google uses data from sites that use its services. Avoid including confidential information in submitted URLs or form fields. Browser privacy controls and tracking blockers may limit analytics collection.
Retention and account requests
Account data, company profiles, monitoring settings and report history are retained to operate your account and research history. To request access, correction or deletion, email [email protected] from your account email address. We may need to verify your identity. Service-provider logs, backups and public research caches may follow separate retention and backup cycles; deletion is not necessarily immediate.
Security and contact
We use server-side credentials and account access checks, but no online service can guarantee absolute security. Do not submit passwords, private API keys or confidential business documents as research input. Contact [email protected] with privacy questions. This policy may be updated as the service changes.