Privacy Policy
Last updated: March 2026
Data Controller: ByteX Ltd. (Hungary)
Contact: [email protected]
1. What We Collect
- Email address — for authentication and email digests
- Competitor URLs and labels — the competitors you add to monitor
- Scraped pricing data — from publicly available web pages
- Payment information — processed by Stripe; we do not store card details
- Usage data — page views and feature usage, for improving the service
2. How We Use Your Data
- To provide the CostPeek service (scraping, AI extraction, email digests)
- To process payments via Stripe
- To send transactional emails (magic links, payment confirmations, weekly digests)
- To improve the service
3. Data Processing
- AI-powered price extraction is processed via Anthropic's Claude API. Page content is sent to Anthropic for analysis. See Anthropic's privacy policy
- Emails are sent via Resend (email delivery service)
- Payments are processed by Stripe
- Hosting: VPS in Europe
4. Data Retention
- Account data: retained while your account is active
- Scrape history: retained for the lifetime of the competitor entry
- After account deletion: all data is deleted within 30 days
5. Your Rights (GDPR)
As a user, you have the right to:
- Access — request a copy of your data
- Rectification — correct inaccurate data
- Erasure — request deletion of your data
- Portability — export your data
- Objection — object to data processing
To exercise any of these rights, contact us at [email protected].
6. Cookies
We use essential cookies only. No tracking cookies, no analytics cookies, no third-party cookies.
cpw_access_token— session authentication (HttpOnly, Secure, 15 min)cpw_refresh_token— persistent login (HttpOnly, Secure, 30 days)
7. Third-Party Services
- Stripe — payment processing (Stripe's privacy policy)
- Resend — email delivery (Resend's privacy policy)
- Anthropic — AI-powered pricing extraction (Anthropic's privacy policy)
- Cloudflare — DNS and tunnel (Cloudflare's privacy policy)
8. Security
- All data is transmitted over HTTPS
- We don't use passwords — authentication is via magic links
- Cookies are HttpOnly and Secure
- AI processing uses Anthropic's Claude API with structured output for reliable extraction
9. Changes
We may update this privacy policy from time to time. For significant changes, we will notify users via email.
10. Contact
ByteX Ltd., Hungary. Email: [email protected]