Privacy policy

1. What we collect

• Account details: your email address, and your name and profile picture if you sign in with Google. If you create a password, we store it only in hashed form.
• Research you create: projects, competitors, notes, evidence, prompts, results and recommendations.
• Keys you add: if you save your own keys for AI or search data providers, we store them encrypted and use them only to run the research you ask for.
• Connected assistants: when you connect an AI assistant to your workspace, we keep a record of the connection and what it is allowed to do, so you can review and remove it.
• Basic technical data: sign-in sessions and server logs (such as IP address and browser type) used for security and troubleshooting.

2. How we use it

• To provide the product: sign you in, save your work and run the research you start.
• To keep the service secure and fix problems.
• To contact you about your account or important changes to the service.
• We do not use your research to train AI models.

3. Who we share it with

• AI and search data providers: when you run discovery, enrichment or AI visibility checks, the relevant brand names, websites and prompts are sent to the provider whose key is used, and are handled under that provider's own terms.
• Google: if you choose Google sign-in, Google confirms your identity to us. We request only your basic profile and email address.
• Assistants you connect: an assistant you approve can read or change your workspace within the permissions you granted. You can disconnect it from your profile at any time.
• Company logos: logos of the companies you research are loaded from a public icon service using the company's website address. No information about you or your account is included.
• Hosting and infrastructure providers that run the service for us.
• Authorities, when the law requires it.

4. Public market data

Industry metrics, guides and tools pages are public. They contain market figures and general guidance, never your private research.

5. Cookies

We use a sign-in cookie to keep you logged in and local browser storage to remember your light or dark theme. We do not use advertising cookies.

6. How long we keep it

We keep your account and research until you delete them or ask us to. Backups and logs are removed on a rolling schedule after that.

7. Your choices

• Export your project data from any project.
• Remove saved keys and connected assistants from your profile.
• Ask us to correct or delete your account and data by writing to us. We respond within 30 days.

8. Security

Data is sent over encrypted connections and saved keys are encrypted at rest. No service can promise perfect security, so please use a strong, unique password and tell us quickly if you suspect misuse.

9. Children

CompetitionOS is a business tool and is not intended for anyone under 16.

10. Changes and contact

If we make a meaningful change to this policy, we will update the date above and tell signed-in users. Questions or requests: hello@grow1000x.com.