Skip to content
Climo
Start free

Legal

Privacy policy

The short version: we store what you need to use Climo, we do not sell it, and deleting your account deletes it.

Last updated November 13, 2026.

What we store

  • Your account: your email address and a password hash, handled by our authentication provider (Supabase). If you sign in with Google, we receive your email address from Google.
  • What you tell us: your product's name and website from setup, the competitors and public pages you add, and your email settings.
  • What we collect for you: copies (snapshots) of the public pages you watch, the changes we find with their summaries, and a log of each check (time, status code, any error). We keep the latest 10 snapshots per page.
  • Emails: a copy of each digest, alert or notice we send or preview for you, and a private token for one-click unsubscribe.
  • Usage: daily counters for summaries and “Check now”, and a short list of first-party product events tied to your account (for example “competitor added” or “upgrade clicked”). No third-party analytics, ad trackers or email tracking pixels.
  • Messages: the email address and text you send through the contact form, and the email you give to join the Pro waitlist.
  • Abuse protection: request counters keyed by a salted, one-way hash of your network address. We never store the address itself.

Cookies

  • Sign-in cookies from Supabase, needed to keep you signed in. Long-lived unless you untick “Keep me signed in”.
  • climo-remember, which records that choice, and climo-theme, your light or dark choice inside the app.

That is all: no advertising or analytics cookies.

Services we use

  • Supabase: database and authentication.
  • Vercel: hosting and scheduled checks.
  • Resend: sending email (digests, alerts and notices).
  • Anthropic: writing change summaries. It receives the lines that changed on a public page, the competitor's name, the page type, and your product name and website if you gave them. It does not receive your email address. Free accounts get up to 5 AI summaries a day and Pro up to 100; after that, summaries are written by simple rules on our own servers.
  • Internet Archive (Wayback Machine): we ask for an archived copy of each page you add, to show what changed in the last month. It receives the page's public URL.
  • Firecrawl (only if enabled on our side): renders public pages that need JavaScript. It receives the page's URL.
  • Google: only if you choose to sign in with Google.
  • Polar: planned for payments. It is not active yet, and this policy will be updated before it is.

How we read competitor pages

Our crawler, ClimoBot, only reads public pages that you add. It identifies itself, follows robots.txt, makes about one request per second per site and never logs in or submits forms. More about ClimoBot.

How long we keep it

Everything linked to your account is kept while the account exists. In the app, Free shows the last 30 days of changes and Pro the last 12 months. Contact messages and waitlist entries sent without an account are kept until you ask us to delete them.

Deleting your data

Settings → Delete account removes your account and, immediately, every competitor, page, snapshot, change, email record, event, usage counter, waitlist entry and contact message linked to it. To see, correct or delete anything else, write to our contact form.

Contact

Questions about this policy: our contact form.