Privacy policy

What Riposte collects

• Your account: your email address and password (stored scrambled, never readable). If you use "Continue with Google", Google shares your name, email address and profile picture. Nothing else from your Google account.
• Waitlist details: what you typed when you joined the waitlist, such as your email and role.
• What you tell Riposte: your product details, the competitors and pages you track, prompts you save, and your alert settings (including a Slack webhook address if you add one).
• Files you upload: PDF and Word files in your knowledge base, plus the text Riposte reads from them and the summary it writes.
• What Riposte creates for you: snapshots of competitors' public pages, detected changes, signals, action kits, briefs and comparisons.
• Feedback you send through the app.

Why

Only to run Riposte for you: to log you in, check the competitor pages you chose, explain changes for your product, send the alerts you switched on, and improve the product from your feedback. Riposte does not sell your data and does not show ads. It uses cookies to keep you logged in, and Google Analytics cookies to count visits and see which pages people use (for example, how many people join the waitlist). No advertising cookies.

Who helps run Riposte

A few services process data on Riposte's behalf:

• Supabase: the database, file storage and login. Your files sit in a private storage area only your account can open.
• Vercel: hosts the website and runs the daily checks.
• Google (Gemini API): the AI that reads changes and your files and writes the explanations. Riposte uses Google's paid Gemini API, where Google doesn't use what Riposte sends to improve its products.
• Google sign-in, if you choose it.
• Google Analytics: counts visits and actions like joining the waitlist. It sees pages viewed and general device and location info, not the content of your account.
• Resend sends emails, and Slack receives alerts only if you connect it.

These services may store data outside India, including in the United States.

Competitor pages

Riposte reads public web pages and public news about the companies you track, follows each site's robots.txt rules, and identifies itself as RiposteBot. It does not log in to other sites or collect personal data about people at those companies.

How long it's kept, and deleting it

Your data stays while your account is open. You can delete files, competitors and history yourself in the app. To delete your whole account and everything in it, email saniyagazala188@gmail.com from your account email, and it will be removed within 30 days. You can also ask for a copy of your data the same way.

Security

Every account can only see its own data (enforced in the database), connections are encrypted, and secret keys are never stored in the website's code. No system is perfect, so if something goes wrong that affects you, you'll be told.

Changes

If this policy changes, the date at the top changes, and important changes are announced in the app or by email. See also the terms of use.