Effective date: 14 October 2026 · Last updated: 31 October 2026
This section is organised by where each kind of information lives.
An email address and the full name you type at sign-up, held in our profiles table. You sign in either with an email address and password or with Google. When you use Google, our authentication provider returns your email address, your name, whether Google has verified your email, a link to your Google profile picture, and Google's internal account identifier, and we store them with your account. We request only the basic sign-in permissions (email and profile) and get no access to your Gmail, Drive or contacts.
The companies you watch, along with each company's score, rank, sentiment and exit-language level at the moment you added it, so we can show you what changed.
The notifications we create for you, whether you have read them, and the alert sensitivity you chose.
For each AI report you request: the company, the status, the AI model used, the token counts and the cost. Once payments are enabled, it will also hold the Stripe payment identifier and the amount. Card numbers never reach us, because checkout runs on Stripe's own page.
Anything you enter in the contact form or the request-analysis form is stored and emailed to us.
When someone searches the catalogue, we store the search text, how many results it returned, whether the searcher was signed in, and when it happened. We deliberately store no user identifier, no email address and no IP address with it, so a search cannot be traced back to you.
Lovable's own platform scripts record each page you load: the page address, the referring address, your browser's user agent and language, a randomly generated session identifier, page performance measurements and browser error reports. Nothing in it is linked to an account, and the cookie banner does not control it because it sets no cookie.
The company reviews we analyse are public reviews written about companies on public platforms. They are not collected from you. A company can ask us to remove its data by writing to contact@customereye.ai.
We use your account to sign you in, your watchlist and alert setting to show changes and send notifications, your report requests to produce and track reports, and form messages to reply to you. Search measurement tells us what people look for so we can improve the catalogue.
When an AI report is generated, company metrics are sent to Anthropic's API to write the summary. No account data and no personal data are sent with them.
You can ask to access, correct, export or delete your personal data by writing to contact@customereye.ai. We answer within 30 days.
The account page does not yet have a self-service delete or export button, so email is the way to do this today.
You also have the right to complain to a data protection authority.
Our database uses row level security so each account can only reach its own records, data is encrypted in transit, and access is limited to the people who run the service. We do not claim any security certification. If a breach puts you at risk, we will tell affected users.
The service is not directed to people under 18.
We announce changes to this policy before they take effect.
Our single contact address for everything is contact@customereye.ai.
Customereye operates this service. For any question about this policy or your data, write to contact@customereye.ai.
When you choose Continue with Google, our authentication provider requests only the basic email and profile permissions and receives your email address, your name, whether Google has verified your email, a link to your Google profile picture and Google's internal account identifier.
Only to create your account, to sign you in, to show your name and email in your account, and to contact you about your account or your requests. We do not use it for advertising, we do not sell it, and we do not send it to any AI model.
We do not share it with anyone except the service providers listed in section 5 that run the service for us. Supabase stores it in our authentication tables in the United States.
Access is limited by row level security and the data is encrypted in transit. We keep it while your account exists.
Write to contact@customereye.ai and we delete your account and the Google data stored with it within 30 days (the same email route as section 8). You can also remove Customereye's access to your Google account at any time at myaccount.google.com/permissions.
Customereye's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
