Privacy Policy
[YOUR LEGAL NAME] operates SBIR Topic Watch. This page says what we collect and why.
What we collect
- Email address, to sign you in and send the alerts you asked for.
- Watches: the keywords, thresholds and company profile you enter, and which topics matched them.
- Subscription status from Paddle (customer ID, subscription ID, status, renewal date). We never see or store your card details; Paddle collects payment as merchant of record.
- Server logs (IP address, time, page) kept for a short time for security and troubleshooting.
Browser plugin
This section covers the SBIR Topic Watch plugin for Chrome and Edge. Its only purpose is to show SBIR/STTR topics from this service: your matches and a topic search.
- Kept in your browser only: your personal token, the server address, and the time you last opened your matches. They are not synced to other devices and are deleted when you remove the plugin.
- Sent to our server: the token, when the plugin fetches your matches or account name, and the words you type into its search box. Both go only to this service, over an encrypted connection. Searching needs no token, so a search is not tied to an account.
- Kept on our server: a one-way hash of the token (not the token itself), the date it was created and the date it was last used, and the usual server logs, which include the search request.
- Never collected: the pages you visit, your browsing history, tabs, bookmarks, form entries or location. The plugin has no permission to read any website.
We use what the plugin sends only to provide the plugin's features and to keep them working and secure. The only other parties that receive it are the companies that carry and store it for us: DigitalOcean (hosting) and Cloudflare (network delivery and protection). Beyond that we do not sell or transfer it to anyone, except when the law requires it, to protect against fraud or abuse, or as part of a merger or sale of the business, and then only with your explicit consent beforehand. We do not use or transfer it for advertising, and not to determine creditworthiness or for lending. No person reads it unless you ask us to (for example, to solve a problem you reported), it is needed for security, or the law requires it. Our use of information received from the plugin adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.
To stop the plugin's access, press "Disconnect" in its settings or "Revoke token" on your account page.
Cookies
We set one cookie, to keep you signed in. On the pricing page Paddle's checkout script may set its own cookies. We do not use advertising or analytics trackers.
Who we share it with
- Paddle, for payment and tax.
- Our email delivery provider, to send sign-in links and alerts.
- Anthropic, for Premium fit ratings: the company profile and keywords of a watch are sent together with public topic text. Your email address is not sent.
- DigitalOcean, our hosting provider, which stores the data on our behalf.
- Cloudflare, which delivers the site and protects it from attacks; all traffic to the site passes through it.
We do not sell personal data.
Keeping and deleting data
We keep your account data while the account exists. You can delete watches yourself, turn alerts off on the account page, or unsubscribe with the link in every email. To delete the whole account, email us and we will remove it.
Your rights
You can ask for a copy of your data, for a correction, or for deletion. Email [email protected].
Contact
[YOUR LEGAL NAME], [YOUR POSTAL ADDRESS].