Privacy policy

Scoper is run by Clément Patrick A Standaert, a self-employed professional (autónomo) based in Barcelona, Spain. He is the data controller for the personal data described in this policy.

Controller

Clément Patrick A Standaert

NIF / NIE

Y7634939B

Address

Carrer de la Guarderia 6, 08017 Barcelona, Spain

Email

clement@scoper.es

Scoper has not appointed a data protection officer, as the law doesn't require one for a business of this size. For anything in this policy, write to clement@scoper.es.

• Account details. Your email address and password. Passwords are stored hashed by our sign-in provider, so we never see them.
• Your business profile. What you tell Scoper about your company: name, website, description, industry, size, stage, revenue range, location and the markets you care about.
• Your workspace. The competitors you track, notes you add, comparisons you generate, and what you do with stories in your feed (read, starred, dismissed).
• Your team. The email addresses of teammates you invite.
• Billing. Stripe handles payments. We store your plan, subscription status, trial dates and Stripe customer ID, never your card number.
• Technical data. IP address and browser details in our hosting providers' logs, and anonymous page-view statistics (no cookies, no tracking across sites).

The GDPR requires a legal basis for each use of personal data. Here is ours:

Running the service

Your account, feed, Monday brief, alerts, comparisons and team access, including learning from the stories you dismiss so your feed improves.
Contract, Art. 6(1)(b)

Service emails

Sign-in, team invitations, briefs, alerts, and notices about your account or billing. Every brief has an unsubscribe link.
Contract, Art. 6(1)(b)

Billing and tax records

Charging your subscription and keeping the records Spanish tax law requires.
Contract and legal obligation, Art. 6(1)(b) and (c)

Security and improvement

Preventing abuse, fixing errors, and anonymous page-view counts to see which pages are used.
Legitimate interest, Art. 6(1)(f)

We don't sell your data, show ads, or send marketing emails. Scoper doesn't make decisions about you that have legal or similarly significant effects. Its AI decides which news stories reach your feed, nothing more.

Scoper uses AI models from Anthropic (Claude) and Google (Gemini) to read news articles, judge whether they matter to your business, and write summaries, descriptions and comparisons.

What we send them: the names and websites of the competitors you track, your business description and industry, and the text of public articles. We don't send your email address, your teammates' details or any payment information.

These companies process data on our behalf, under data processing agreements, and only to provide their service to us:

Vercel

Hosts the website and app; anonymous page-view stats.

EU servers (Dublin)

Supabase

Database and sign-in.

EU (Ireland)

Railway

Runs the background jobs that find and analyse news.

United States

Stripe

Payments, subscriptions and invoices.

EU and United States

Resend

Sends Scoper's emails.

United States

Anthropic

AI analysis (see above).

United States

Google

AI analysis (Gemini), place search and maps for local competitors, and the website icons shown next to competitors.

United States

Serper

Web searches for news about your competitors. Receives search terms only, no personal data.

Inside the app, your browser also loads competitor icons from Google and a world-map file from jsDelivr. Like any website, those services see your IP address when your browser asks for the file.

Your account, business profile and feed are stored in the EU. Some of the providers above are US companies or process data in the United States. Those transfers rely on the EU-U.S. Data Privacy Framework where the provider is certified under it, and otherwise on the European Commission's Standard Contractual Clauses in the provider's data processing agreement.

• Account and workspace data: for as long as your account exists. Ask us to delete it at any time and it's gone within 30 days.
• Billing records: as long as Spanish tax and accounting law requires, generally up to six years.
• Logs: a few weeks at most, as set by our hosting providers.
• Backups: deleted data can remain in encrypted backups for a short time, until those backups are replaced.

Under the GDPR you can ask us to:

• give you a copy of your personal data, or send it to you in a portable format;
• correct data that's wrong, or delete it;
• restrict how we use it, or object to uses based on legitimate interest.

Email clement@scoper.es from the address on your account. We reply within one month and may ask you to confirm your identity first.

If you think we've handled your data wrongly, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es), or to the authority in the EU country where you live. We'd appreciate the chance to fix it first.

• Sign-in cookies. Set by Supabase to keep you logged in. They're strictly necessary, so they don't need your consent.
• Local storage. Remembers small things in your browser, like a banner you've closed or a team invitation while you sign up.
• Analytics. Vercel Web Analytics counts page views without cookies and without identifying you.

There are no advertising or tracking cookies, so there's no cookie banner. Checkout pages are hosted by Stripe, which sets its own cookies to prevent fraud.

All traffic is encrypted with HTTPS, passwords are hashed, and card details are handled entirely by Stripe. If a breach ever puts your data at risk, we'll tell you and the authorities as the law requires.

Scoper is a business tool and isn't meant for anyone under 18.

When this policy changes, we'll update the date at the top. If a change affects how we use your data, we'll email account owners before it takes effect.

Questions or requests: clement@scoper.es. Full details of who runs Scoper are in the legal notice.