Privacy Policy

This policy applies to personal data we collect when you visit funnelspy.ai or use the FunnelSpy product (together, the “Service”). “Personal data” means information that identifies or could reasonably be linked to you.

It does not cover the practices of companies we don't control — for example, Stripe's checkout pages, Google's sign-in screens, or the third-party websites you choose to analyze with FunnelSpy. Those services have their own privacy policies. For how we handle content that appears on the websites you analyze, see section 5.

Profile and contact data

When you create an account we collect your email address and, if you sign in with Google, the name and profile details Google shares with us. If you sign up with a password, it is stored only in hashed form by our authentication provider — we never see or store it in plain text.

Payment data

Payments are processed by Stripe. Your card number is entered directly with Stripe and never touches our servers. We receive only limited billing metadata: your plan, subscription status, and Stripe's identifiers for your customer record and subscription.

Device and usage data

When you use the Service we automatically collect your IP address, browser and device type, the pages you view, referral source, clicks and interactions, and web performance metrics. We use this to understand how the Service is used and to improve it (see Cookies and analytics).

Content you submit

We collect the website URLs you submit for analysis, the funnel reports generated from them, and anything you send us in support conversations.

Where this data comes from

• Directly from you — when you create an account, run an analysis, or contact us.
• Automatically — through cookies and our analytics tooling as you use the Service.
• From service providers — Stripe sends us billing events; Google sends us basic profile information if you choose Google sign-in.

• Providing the Service — creating your account, generating and storing your funnel reports, and processing payments.
• Improving the Service — understanding which features are used, diagnosing problems, and running experiments on our own website (for example, testing two versions of our landing page to see which explains the product better).
• Communicating with you — transactional email such as sign-in confirmations, billing receipts, and responses to your support requests.
• Security and fraud prevention — protecting the Service, our users, and others.
• Legal compliance — meeting our obligations under applicable law.

We do not sell your personal data, and we do not share it with third parties for their own advertising. If we ever want to use your data for a materially different purpose, we'll tell you first.

We use two kinds of cookies:

• Essential cookies— set by our authentication provider to keep you signed in. The Service doesn't work without them.
• Analytics cookies — we use PostHog for product analytics. This includes a first-party cookie (fs_aid) holding a random anonymous identifier, which we also use to keep website experiments consistent — so you see the same version of a page on every visit. Analytics requests are served through our own domain.

We do not use third-party advertising cookies or cross-site trackers. Because there is no consistent industry standard, we do not currently respond to “Do Not Track” browser signals. You can block or delete cookies in your browser settings; if you block essential cookies, signing in will stop working.

FunnelSpy's core feature is analyzing other companies' marketing. When you run an analysis, we visit publicly available pages of the website you specify and public ad-library listings (such as the Meta Ad Library) — the same content anyone can view in a browser. We do not access password-protected areas or collect non-public personal data.

Public pages sometimes incidentally contain personal data the business chose to publish — a founder's name in an about page, or a customer's name in a testimonial. Where such content appears in a report, we process it solely to generate and display that report to the customer who requested it. We do not use it to build profiles of individuals, and we do not sell it.

If you believe a FunnelSpy report contains your personal data and you would like it removed, contact us at hello@funnelspy.ai and we'll review promptly.

We share personal data only with the service providers we need to run FunnelSpy, each bound by its own contractual and privacy obligations:

• Vercel — hosting and content delivery.
• Supabase — database and authentication.
• Stripe — payment processing.
• PostHog — product analytics and website experiments.
• Browserbase — browser infrastructure used to fetch the public pages you ask us to analyze. It processes the URLs you submit, not your profile or payment data.
• Anthropic — AI processing used to assemble funnel reports. It receives the URLs you submit and the public page content we fetch, under commercial API terms; we do not send it your profile or payment data.
• Google — only if you choose to sign in with Google.

Beyond service providers, we may disclose personal data when required by law or legal process, to enforce our Terms of Service, or to protect the rights, safety, or property of FunnelSpy, our users, or others. If FunnelSpy is involved in a merger, acquisition, or sale of assets, personal data may transfer as part of that transaction — we'll notify you of any resulting change in ownership or use of your personal data.

We may also create and share aggregated or de-identified data (for example, overall usage statistics) that cannot reasonably be used to identify you.

We use industry-standard safeguards appropriate to the data we handle: encryption in transit, hashed credentials, access controls, and infrastructure providers with strong security programs. No method of transmission or storage is completely secure, so we can't guarantee absolute security — please use a strong, unique password.

We keep your personal data for as long as your account is open. Your funnel reports remain available until you delete them or your account. If you ask us to delete your account, we delete or de-identify your personal data within 30 days, except where we need to retain it to comply with law, resolve disputes, or enforce our agreements. Aggregated or de-identified data may be retained indefinitely.

FunnelSpy is a business tool and is not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us personal data, contact us at hello@funnelspy.ai and we will delete it promptly.

Depending on where you live, you may have some or all of the following rights over your personal data:

• Access — ask what personal data we hold about you and receive a copy.
• Correction — ask us to fix inaccurate or incomplete data.
• Deletion — ask us to delete your personal data.
• Portability — receive your data in a machine-readable format.
• Objection and restriction — object to or restrict certain processing.
• Withdraw consent — where processing is based on consent, withdraw it at any time.

If you are in the EU, UK, or EEA: we act as the data controller for the personal data described in this policy, and we process it to perform our contract with you (providing the Service), for our legitimate interests (improving and securing the Service), or with your consent. You also have the right to lodge a complaint with your national supervisory authority.

If you are a California resident: you have the rights to know, access, correct, and delete personal information, and to opt out of its sale or sharing. We do not sell personal information or share it for cross-context behavioral advertising, and we do not discriminate against you for exercising your rights.

To exercise any of these rights, email hello@funnelspy.ai. We may ask you to verify your identity before acting on a request.

FunnelSpy is operated from the United States, and our service providers process data primarily in the United States. If you use the Service from elsewhere, your personal data will be transferred to and processed in the US, where privacy laws may differ from those in your jurisdiction. Where required, we rely on appropriate safeguards for such transfers, such as the European Commission's standard contractual clauses.

We may update this policy as the Service evolves. When we do, we'll post the new version here and update the effective date at the top. If a change is material, we'll give you reasonable advance notice — by email or in the product — before it takes effect.

Questions, concerns, or requests about this policy or your personal data: hello@funnelspy.ai.