Intelligence/ API

Privacy policy

Last updated 2026-05-14

Who we are

Intelligence is operated by StyleUpp s.r.o. (Czech Republic). For data-protection questions, contact privacy@intelligence-beryl.vercel.app.

What data we collect

  • Account data: email address, optional display name, authentication tokens (managed by Supabase Auth).
  • Subscription data: Stripe customer id, plan tier, invoice history (handled by Stripe; we never see your card).
  • Product usage: page views, feature interactions, API request counts (PostHog + Upstash + our own api_usage table).
  • User-created content: watchlists, alert preferences, API keys (hashed only — we never store the raw key), webhook URLs + signing secrets.
  • Operational logs: error stack traces (Sentry), request/response status codes (Vercel + Sentry).

What data we do NOT collect

  • Payment card details — handled exclusively by Stripe.
  • Browsing history outside our app.
  • Location data beyond the coarse country derived from your IP.

Why we process your data

  • To run the service (auth, billing, alerts, API rate-limiting).
  • To improve the product (anonymous usage analytics).
  • To meet legal obligations (tax records, dispute responses).

Third-party processors

Data flows through these processors. Each is GDPR-compliant and binds itself by data-processing agreement:

  • Supabase (database, auth, storage) — EU-West-1.
  • Vercel (hosting, edge network).
  • Stripe (payments).
  • Resend (transactional email).
  • PostHog (product analytics).
  • Upstash (rate-limit cache).
  • OpenAI (AI summarization). Contract data is sent to OpenAI only when generating analyst summaries.
  • Sentry (error tracking).

Your rights (GDPR)

  • Access — request a copy of your data.
  • Rectification — correct anything wrong.
  • Erasure — delete your account from /app/settings at any time. We hard-delete profile + billing + watchlists + API keys + webhooks within 7 days. Operational logs and invoices may be retained for the legal minimum (7 years for tax).
  • Portability — request your data as JSON.
  • Object — to processing for analytics; switch off in settings.

Cookies

We use one cookie set: the Supabase Auth session cookie. We do not set marketing or third-party tracking cookies.

Changes

If we change this policy materially, we'll email registered users at least 14 days before it takes effect.