Draft for review, Oct 28, 2026. Written in plain words by the team and not yet reviewed by a lawyer; it describes how the service works today.

Privacy

Spotlora is run by PitchCall, Inc. (“we”). This page says what we collect when you use Spotlora, why, who handles it for us, and how to have it deleted.

What we collect

Free report. The store link and the email address you enter. The report itself is public to anyone who has its link (a random 22-character address); it shows public store data and AI answers, never your email.
Account. Your name, email address and sign-in details, handled by our sign-in provider, Clerk, plus the optional answers you give when you set up a workspace (your role, your goal).
Your apps. Store links, the questions you track, the answers we collect from the AI assistants with the pages they cite, and the competitors, statuses and notes you add.
Connections, if you add them. Daily totals from App Store Connect, Google Play (through your GA4 export), RevenueCat or your hosting logs: page views, downloads, installs, revenue and subscriptions per day and per source. We store daily totals, not records of individual users. Secret keys are not stored in our database: a connection refers to a server setting that holds the key.
Site tag, if you add it to your website. For each new visit it sends which assistant the visitor came from (or none), the page path and the time. It sets no cookies, sends nothing when the browser signals Do Not Track or Global Privacy Control, and IP addresses are used only in memory to limit abuse, never stored. We keep a count per day and source.
This website. No analytics or advertising cookies. The cookies set are the sign-in session (Clerk) and, if you pick one, your light or dark theme.

Why we use it

To run the service: ask the assistants your questions, show the results, and send the report and the emails you turn on.
To build category benchmarks from answer rates across tracked apps. Benchmarks never show another account's app, questions or connected data.
To keep the service working and fair, for example the limit of three free reports per email address per day.

We don't sell data and we don't use it for advertising.

Who handles it for us

Vercel (website), Neon (database), Google Cloud (scheduled runs), Clerk (sign-in), Resend (email), and the AI providers we ask: OpenAI, Google, Perplexity and Anthropic. The AI providers receive the questions and, when a model reads or summarizes results, the answers and public listing text; they never receive your email address or sign-in details. These providers may process data outside your country.

How long we keep it

Account data, answers and connected totals are kept while your account exists. Free report requests are kept so the report link keeps working. Ask us and we delete either; removing a connection stops new data from it at once.

Your choices

Ask for a copy of your data, a correction, or deletion of your account or of a free report.
Remove a connection or the site tag at any time.
Turn off the weekly digest and alert emails in your settings.

Changes and contact

When this page changes we update the date at the top, and we email account owners about changes that affect them. A contact address for privacy requests will be added here before this draft is final; until then, reply to any email you received from Spotlora.