Privacy policy

What Riposte collects

• Your account: your email address and password (stored scrambled, never readable). If you use "Continue with Google", Google shares your name, email address and profile picture. Nothing else from your Google account.
• Waitlist details: what you typed when you joined the waitlist, such as your email and role.
• What you tell Riposte: your product details, the competitors and pages you track, prompts you save, and your alert settings (including a Slack webhook address if you add one).
• Files you upload: PDF and Word files in your knowledge base, plus the text Riposte reads from them and the summary it writes.
• What Riposte creates for you: snapshots of competitors' public pages, detected changes, signals, action kits, briefs and comparisons.
• Feedback you send through the app.

Why

Only to run Riposte for you: to log you in, check the competitor pages you chose, explain changes for your product, send the alerts you switched on, and improve the product from your feedback. Riposte does not sell your data, does not show ads, and does not use advertising or tracking cookies. The only cookies are the ones that keep you logged in.

Who helps run Riposte

A few services process data on Riposte's behalf:

• Supabase: the database, file storage and login. Your files sit in a private storage area only your account can open.
• Vercel: hosts the website and runs the daily checks.
• Google (Gemini API): the AI that reads changes and your files and writes the explanations. While Riposte is in beta it may use Google's free Gemini tier, and Google's terms for that tier allow Google to use what is sent to improve its products. So please don't upload anything confidential during the beta.
• Google sign-in, if you choose it.
• Resend sends emails, and Slack receives alerts only if you connect it.

These services may store data outside India, including in the United States.

Competitor pages

Riposte reads public web pages and public news about the companies you track, follows each site's robots.txt rules, and identifies itself as RiposteBot. It does not log in to other sites or collect personal data about people at those companies.

How long it's kept, and deleting it

Your data stays while your account is open. You can delete files, competitors and history yourself in the app. To delete your whole account and everything in it, email saniyagazala188@gmail.com from your account email, and it will be removed within 30 days. You can also ask for a copy of your data the same way.

Security

Every account can only see its own data (enforced in the database), connections are encrypted, and secret keys are never stored in the website's code. No system is perfect, so if something goes wrong that affects you, you'll be told.

Changes

If this policy changes, the date at the top changes, and important changes are announced in the app or by email. See also the terms of use.