Privacy Policy

• Account: your email address, name (if you give it) and workspace name, used to sign you in and run your account.
• Billing: plan, credit balance and purchase history. Stripe processes payments; we never see or store your card details.
• Usage: searches you run, leads you save, your notes, pitch drafts and preview sites, and technical logs (for example request times and errors) used to operate, secure and improve the service.
• Emails: sign-in links and service messages sent through our email provider.

Legal bases (where UK/EU law applies): performance of our contract with you, and our legitimate interests in running, securing and improving Gapscore.

Gapscore shows information about businesses that is publicly available or licensed from data providers: name, category, location, phone, website, ratings and review counts, and facts derived from the business's public website and domain records. Most of this is business data. Where a business is a sole trader, some of it may identify a person.

We use it to score businesses and help our users offer them services, relying on legitimate interests. We keep it to a minimum: we store yes/no and numeric facts, not page text, review text or reviewer names; Google Maps content is kept for no more than 30 days; and our crawler (GapscoreBot) makes one request to a business's homepage and follows no links.

Any business can ask to be removed at gapscore.app/remove. Once confirmed, it is suppressed across every account and will not reappear.

When someone opens a preview site we record the time, the referring page and a one-way hash of the browser's user agent to count views. We do not store IP addresses or set cookies on preview sites.

We use only the cookies needed to keep you signed in and to secure the app. We do not use advertising or third-party analytics cookies.

We do not sell personal data or share it for cross-context behavioural advertising. We use these service providers to run Gapscore, under contracts that limit their use of the data:

• Supabase: database and authentication.
• Vercel: hosting.
• Stripe: payments and billing.
• Resend: email delivery.
• Anthropic: AI generation of pitch drafts and preview sites (business details and your inputs are sent to generate them).
• Google Maps Platform and DataForSEO: business listings, search demand and review statistics.

We may also disclose data if the law requires it, to protect our rights or users, or as part of a sale or reorganisation of the business, in which case this policy continues to apply.

Gapscore is run from the United States, and our providers may process data in the US and elsewhere. Where UK or EU data is transferred, we rely on appropriate safeguards such as the providers' standard contractual clauses or the UK Extension to the EU-US Data Privacy Framework.

• Account and workspace data: while your account is open, then deleted within 90 days of closure, except billing records we must keep for tax and accounting (usually 7 years).
• Third-party business data: as short as the provider allows; Google Maps content no more than 30 days.
• Removal requests: kept so that removals stay in effect.

Depending on where you live (for example under UK/EU GDPR, or US state laws such as those in California and Colorado), you may have rights to access, correct, delete or port your personal data, to object to or restrict processing, and to opt out of certain uses. Email hello@gapscore.app and we will respond within the time the law requires. You can also complain to your data protection authority (in the UK, the ICO).

Business owners can use gapscore.app/remove or email us to have a business removed or its details corrected.

We use encryption in transit, access controls that restrict each workspace to its own data, and least-privilege access for our systems. No system is perfectly secure; tell us at hello@gapscore.app if you find a problem.

Gapscore is a business tool and is not directed to anyone under 18.

We will post changes here and, if they are material, tell users by email or in the app before they apply.