KitBreeze Inc. ("we", "us", "our") is committed to safeguarding user data privacy and upholding strict confidentiality regarding your strategic competitive surveillance activities.
We operate under a simple, non-negotiable principle: your market intelligence is your company's proprietary secret. What competitors you monitor, which pricing tiers you track, and what strategic alerts you configure will never be sold, rented, monetized, or syndicated to advertisers, brokers, or rival companies. We treat your account activity with institutional confidentiality.
To deliver autonomous competitor monitoring, we collect minimal necessary data: (a) Account Identifiers: business email address, user display name, and securely salted authentication hashes; (b) Workspace Configuration: competitor target URLs, crawl frequency preferences, Slack webhook URLs, and email notification destinations; (c) Billing Information: transaction IDs, billing country, and tax identifiers handled by PCI-DSS Level 1 certified processors (Stripe, Razorpay); (d) Edge Telemetry: IP addresses, browser headers, and request timestamps to prevent abuse and ensure edge reliability.
Our edge crawler agents operate exclusively on public internet data. We inspect publicly accessible HTML markup, meta tags, and structured pricing tables on competitor domains. We never harvest private personal consumer identities, password-protected intranet feeds, or behind-the-login member assets. All crawled snapshots are processed solely for visual, structural, and textual delta computation.
We do not sell, exchange, or rent personal consumer data, corporate email addresses, or tracked URLs to third-party data aggregators or programmatic ad exchanges. Your workspace data remains exclusively accessible to members of your authorized organization.
All data transmitted between your browser, our edge workers, and database infrastructure is protected using modern TLS 1.3 cryptography. At rest, data snapshots, configurations, and webhook secrets are encrypted using AES-256 edge encryption with multi-tenant row-level access controls.
We partner exclusively with SOC-2 and ISO 27001 certified global cloud providers: Cloudflare (edge runtime and DNS), Supabase (PostgreSQL encrypted database), Stripe & Razorpay (secure billing processing), and Resend (transactional email alerts). Each provider is bound by strict Data Processing Agreements (DPAs).
We utilize strictly necessary session cookies and local storage tokens required for secure user authentication, multi-factor verification, and UI workspace preferences. We do not use third-party invasive retargeting pixels or ad-tracking cookies across our authenticated applications.
You retain full control over your historical intelligence data. You can export change logs and audit records anytime via CSV or PDF. If you choose to close your account, you can trigger a 1-click workspace purge that irrevocably wipes all competitor monitors, snapshots, and personal credentials within 30 days.
Under the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA), you possess full legal rights to: (a) Access your personal data records; (b) Rectify inaccurate account information; (c) Request total data erasure ("Right to be Forgotten"); (d) Restrict or object to automated processing; and (e) Data portability in standard formats.
For privacy inquiries, GDPR data subject access requests (DSAR), or Data Processing Addendums, please contact our dedicated Data Protection Officer at [email protected]. For general corporate matters, reach us at [email protected]. We respond to all formal privacy inquiries within 48 business hours.