Privacy Policy

1. Who we are

Glimpse ("we", "us", "our") is a competitive intelligence platform operated from Belgium. We are the data controller for the personal data we process. You can reach us at privacy@glimpsehq.io.

2. What data we collect

• Account data - name, email address, and organization name when you sign up.
• Usage data - pages visited, features used, and interaction timestamps to improve our product.
• Billing data - payment details are processed by Stripe. We do not store credit card numbers.
• Third-party integrations - when you connect Slack, we store an OAuth access token and your Slack workspace ID to deliver notifications.
• Competitor data - publicly available information about the companies you choose to track (websites, social media, job postings, etc.).

3. Why we process your data

We process personal data based on the following legal grounds under the GDPR:

• Contract performance (Art. 6(1)(b)) - to provide and maintain our service, process payments, and deliver notifications.
• Legitimate interest (Art. 6(1)(f)) - to improve our product, prevent abuse, and ensure security.
• Consent (Art. 6(1)(a)) - for optional analytics and marketing communications, which you can withdraw at any time.

4. Who we share data with

We share data only with processors that help us run the service:

• Supabase - database hosting and authentication (EU region).
• Vercel - application hosting.
• Stripe - payment processing.
• Slack - notification delivery (only when you connect your workspace).
• PostHog - product analytics.

We do not sell your personal data to third parties.

5. International transfers

Some of our processors are based outside the European Economic Area. Where this is the case, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

6. How long we keep data

We retain your account data for as long as your account is active. After account deletion, we remove personal data within 30 days, except where retention is required by law (e.g. invoicing records). Usage analytics are anonymized after 12 months.

7. Your rights

Under the GDPR, you have the right to:

• Access - request a copy of your personal data.
• Rectification - correct inaccurate data.
• Erasure - request deletion of your data.
• Restriction - limit how we process your data.
• Portability - receive your data in a structured, machine-readable format.
• Objection - object to processing based on legitimate interest.
• Withdraw consent - where processing is based on consent.

To exercise any of these rights, contact us at privacy@glimpsehq.io. We will respond within 30 days. You also have the right to lodge a complaint with the Belgian Data Protection Authority (www.dataprotectionauthority.be).

8. Cookies

We use essential cookies for authentication and session management. Optional analytics cookies are only set with your consent. You can manage your preferences at any time through your browser settings.

9. Security

We use encryption in transit (TLS), encrypted database connections, and role-based access controls. Slack tokens are stored server-side and never exposed to the browser. We regularly review our security practices.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or an in-app notification. Continued use of the service after changes constitutes acceptance of the updated policy.