lookalikewatchBack to the site

Legal

Privacy Policy

Last updated: July 24, 2026

1. What we collect

  • Account data — your email address (used to sign in via magic link) and optional display name.
  • Workspace data — your organization name, the brands and domains you register for monitoring, notification settings (including webhook URLs and channel addresses you configure), and team membership.
  • Findings — lookalike candidate domains and related evidence (DNS, mail, TLS, and web signals). These describe third-party domains gathered from public sources, not you.
  • Billing data — handled by our merchant of record, Polar. We store your subscription state and plan; we never see or store card numbers.
  • Operational logs — standard service logs (timestamps, request metadata) kept for security and debugging.

We don't run third-party advertising or analytics trackers, and we don't sell personal data.

2. Why we use it

To operate the service: authenticate you, run monitoring for your registered brands, deliver alerts and digests to the channels you chose, bill your subscription, and keep the service secure. Legal bases (where GDPR applies): performance of contract for the service itself, legitimate interest for security and service improvement, and consent where required.

3. Where it lives (subprocessors)

  • Railway — application hosting and database.
  • Polar — merchant of record: checkout, subscription billing, tax.
  • Resend — transactional email delivery (sign-in links, alerts, digests).
  • Cloudflare — domain and DNS for the service itself.

4. Retention

Account and workspace data is kept while your account exists. When you delete your organization (or ask us to delete your account), we delete its data within a commercially reasonable period, except records we're required to keep (such as billing records held by our merchant of record). Operational logs rotate on a short schedule.

5. Your rights

You can access and correct your workspace data in the product. Depending on where you live, you may also have rights to access, export, correct, or delete personal data we hold about you — email us and we'll act on verified requests: [email protected].

6. Cookies

We use only the cookies the service needs to work: a session cookie after sign-in and a cookie remembering your active workspace. No cross-site tracking.

7. Changes

If we change this policy in a material way we'll notify account holders by email or in the product before the change takes effect.