Privacy Policy

Account & billing

• Name and email — for authentication, account communications, and digest emails.
• Payment information — handled entirely by Stripe; we never see or store your card details.

Project & search data

• Website URLs and descriptions you add to monitor.
• Keywords, subreddit selections, exclusion lists, and AI prompt customizations.
• Email digest preferences — your chosen frequency (real-time / daily / off), digest send time, and IANA timezone (e.g. Europe/Paris) so the digest fires at the right local time.

Reddit data

• If you connect your Reddit account, we store your Reddit username and OAuth credentials encrypted at rest. We use them only to perform actions you initiate.
• Reddit posts and comments that match your search criteria — title, body, URL, author, subreddit, score, comment count, timestamps, and AI-generated relevance scores.

Integration data

• Slack — when you connect Slack, we store the OAuth token, workspace name, and the channel you select for alerts.
• Webhooks — the endpoint URL you configure, plus the labels and on/off state.

Team workspaces

• For invited teammates, we process their email address and basic profile data (name, avatar) to provision shared workspace access.

Non-personal data

• Cookies, IP address, browser type, device information, and usage analytics — to operate the Service, debug issues, and improve UX.

• Authentication and account management.
• Subscription and one-time payment processing (15-Day Pass).
• Monitoring Reddit for opportunities matching your criteria.
• Scoring posts with AI to prioritize relevance.
• Sending email, Slack, or webhook alerts at the cadence and time you choose.
• Provisioning team access and respecting workspace ownership.
• Customer support and continuous improvement of the Service.

All data is stored using industry-standard encryption. Reddit OAuth tokens and Slack tokens are encrypted at rest. We use secure HTTPS connections for all data transmitted between your browser, our servers, and integration partners.

We do not sell, trade, or rent your personal data. We share strictly with the providers required to operate the Service:

• Stripe — for payment processing.
• Supabase — for authentication and database storage.
• OpenAI / Anthropic — for AI relevance scoring and reply suggestion generation; post content + your keywords are sent to their APIs.
• Reddit — when you initiate actions (sending DMs, posting comments) via the Chrome extension or dashboard.
• Slack — when you have an active Slack integration, alert payloads are posted to your workspace.
• Your configured webhook endpoints — alerts are POSTed to URLs you provide. You control where this data goes.
• Resend — for transactional and notification email delivery.

Each provider has its own privacy policy governing its handling of your data.

You can:

• Access the data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and personal data.
• Export your data on request.
• Change email digest frequency or turn alerts off at any time from the Alerts settings.
• Disconnect Slack, remove a webhook, or revoke Reddit OAuth at any time.
• Remove team members from your workspace.
• Cancel your subscription from your billing settings.

To exercise any of these rights, email us at axel@redship.io.

We keep your personal data while your account is active. If you delete your account, we remove your personal data within 30 days, except where we're legally required to retain it (e.g. invoicing). Reddit posts stored in your inbox are deleted with your account.

Slack tokens and webhook configurations are deleted immediately when you disconnect them or delete the project they belong to.

The RedShip Chrome extension reads page content on Reddit only when you are signed in to RedShip and on a Reddit page where you choose to take action. It does not run in the background, does not collect browsing data outside Reddit, and does not transmit Reddit page content to our servers without an explicit action from you (sending a DM, posting a reply, etc.).

Our Service integrates with Reddit's API, Slack, and any webhook endpoints you provide. Your use of those services is also subject to their own privacy policies. We are not responsible for their data practices.

RedShip is not intended for users under 13. We do not knowingly collect data from children. If you believe a child has submitted personal information to us, please contact us and we will delete it.

Your data may be processed in countries other than your country of residence (notably the EU and the US, where our infrastructure providers operate). We rely on appropriate safeguards — such as Standard Contractual Clauses — for any cross-border transfer.

We may update this Privacy Policy occasionally. Material changes will be communicated by email and reflected in the "Last updated" date above.

For privacy questions, email us at axel@redship.io.