Privacy Policy

competly.co is operated by Competly, UAB, a private limited company registered in Lithuania (company code 308157857, VAT code LT100020947016, registered address Svajonių al. 4, Jonučių II k., Garliavos apyl. sen., LT-53272 Kauno r. sav., Lithuania). Competly, UAB is the controller of the personal data described here. You can reach us about anything in this policy at [email protected].

It covers the public website competly.co, the signed-in application, and the emails and invoices we send. competly.co is a business tool: it is sold to companies, and the people whose data we handle are mostly the employees of our customers who sign in to it.

The product data a customer uploads (product names, SKUs, barcodes, prices, stock) is business data, not personal data. The competitor pages we read are public web pages of online shops; we read their prices, not information about people.

• Account data: your work email address, a password stored only as a bcrypt hash, the account name (derived from your email domain, editable) and the markets you choose.
• Billing data: the company name, billing address, VAT number and email you give at checkout, your plan and its payment history. Card details are entered on Stripe's page and never reach our servers; we see only the card brand, its last four digits and its expiry.
• Usage data: which pages of the application you open and when, the credits your account spends, and the jobs it runs. We use it to run the service, to show you your own usage and to answer support questions.
• Security data: a Cloudflare Turnstile check on sign-up and log-in that tells robots from people. When our staff open your account to answer a support request, we record who did so, when, and from which IP address and browser.
• What you send us: emails to [email protected], with whatever you choose to include.

We do not collect special categories of data, we do not buy data about you, and we do not use advertising or cross-site tracking.

• To provide the service you signed up for: creating and securing your account, running your price checks, showing your data back to you. Basis: performance of a contract (GDPR art. 6(1)(b)).
• To bill you and keep accounting records: issuing invoices, charging subscriptions, calculating VAT. Basis: contract, and our legal obligations under Lithuanian accounting and tax law (art. 6(1)(c)).
• To keep the service secure and working: abuse prevention, error investigation, capacity planning. Basis: our legitimate interest in a reliable, safe service (art. 6(1)(f)).
• To tell you about your account: payment receipts, failed payments, credit limits, changes to these terms. Basis: contract. We do not send marketing email without your consent, and every such email can be unsubscribed from.

We use a small number of service providers, each bound by a data processing agreement and each given only what its job needs:

• Hostinger International Ltd. — the servers that run competly.co and its database, in a data centre in Vilnius, Lithuania.
• Stripe Payments Europe, Ltd. (Ireland) — payments, subscriptions, invoices and VAT calculation. Stripe is also an independent controller for the fraud prevention it performs.
• Cloudflare, Inc. — the Turnstile robot check on sign-up and log-in.
• OpenAI — reads product names and competitor page text to match products. Your account and personal data are not sent to it.
• Oxylabs and our own scraping gateway — fetch public competitor web pages. They receive the addresses of those pages, never your account details.

We do not sell personal data, and we disclose it to authorities only when the law requires us to.

Your account and billing data are stored in the EU. Where a provider above processes data outside the European Economic Area (Cloudflare, OpenAI and Stripe's group companies), the transfer relies on the EU–US Data Privacy Framework or on the European Commission's Standard Contractual Clauses.

• Account data: for as long as the account exists. When an account is deleted, its users, catalog, settings and usage history are deleted with it.
• Invoices and payment records: 10 years, as Lithuanian accounting law requires.
• Usage records (which pages were opened, what credits were spent): for as long as the account exists, so your usage history stays complete.
• Support emails: up to 3 years after the conversation ends.

Competitor prices are public facts about shops, not about you, and are kept as price history.

You may ask us for a copy of your personal data, to correct it, to delete it, to restrict or object to its processing, and to receive it in a portable format. Write to [email protected] from the address on your account; we answer within one month.

If you believe we handle your data unlawfully, you may complain to the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija) (https://vdai.lrv.lt) or to the supervisory authority where you live. We would be glad to hear from you first.

competly.co sets only the cookies it needs to work: a session cookie that keeps you signed in, a security cookie that protects sign-in forms, and a cookie that remembers your language. Cloudflare Turnstile may set a cookie of its own during the robot check. There are no analytics, advertising or tracking cookies, which is why there is no cookie banner.

Connections are encrypted with TLS, passwords are stored as salted hashes, payment details never touch our servers, and each customer's data is separated from every other customer's at the database layer. Staff access customer accounts only to answer a support request, and every such access is logged.

When this policy changes, the date at the top changes with it. If a change affects how we use data you have already given us, we tell account owners by email before it takes effect.