Privacy Policy

We collect account details such as your name, email address, and authentication information when you sign in.

We collect website configuration data you provide, including project URLs, crawl settings, tracked prompts, competitors, and widget configuration.

We collect product analytics and diagnostic events, including usage events, device and browser information, and error telemetry to operate and improve Spotlight.

When you add a project, Spotlight crawls the public pages you authorize us to scan. We store extracted page content, metadata, summaries, and search index data to provide citation tracking and on-site search.

We only crawl publicly accessible content you configure. We do not intentionally access password-protected content unless you explicitly make it available through the service in the future.

Spotlight uses third-party AI providers to summarize page content, evaluate citations, and generate grounded answers from your indexed content.

We send only the content and query context needed to provide the feature. We do not permit our providers to use your data to train public models where contractual controls are available.

We use analytics and error monitoring tools including PostHog, Vercel Analytics, Vercel Speed Insights, and Sentry to understand product usage, performance, and failures.

These tools may use cookies, local storage, and similar technologies to recognize sessions and measure usage. By using Spotlight, you consent to this operational tracking.

We use information to create and manage accounts, crawl and index websites, provide search and citation tracking, process payments, secure the service, and support customers.

We also use information to improve the reliability, accuracy, and usability of the platform.

We share data only with service providers needed to operate Spotlight, such as hosting, analytics, authentication, payment, and AI infrastructure partners.

We may disclose information if required by law or to protect Spotlight, our users, or the public from fraud, abuse, or security threats.

We retain account and project data for as long as your account is active and for a reasonable period afterward for security, billing, backup, and legal purposes.

If you cancel your account, we may delete project data after a retention window unless we are required to keep it by law.

We use reasonable administrative, technical, and organizational safeguards to protect your information. No system is perfectly secure, so we cannot guarantee absolute security.

You can request access, correction, or deletion of your account data by emailing us. You can also stop using the service and remove the widget from your site at any time.

For privacy questions or data requests, email hello@spotlight.cx.