Privacy Policy

This policy covers Scope by The InnerView and the other products of The InnerView ("the service").

Scope by The InnerView is provided by The InnerView, registered address Koritsas 3, Melissia, Athens, Greece, VAT number EL154450996 ("we", "us"). It is the data controller for the personal data described below.

• Account data — your email address, and profile details you add.
• Submitted store data — the store URL(s) you audit, page screenshots we capture, and page content/signals extracted from those public pages (brand name, product titles, prices, structural signals).
• Usage & billing data — audit history, credit balance and spend, subscription tier, and payment metadata (handled by Stripe — see §5).
• Support communications — anything you send us at hello@theinnerview.app.
• Newsletter sign-ups — your email address and the consent record described in §7.

• To run the audit you requested and show you the results.
• To operate your account, billing, and credits.
• To personalize findings to your store's actual content.
• To secure the service and prevent abuse (e.g. rate limiting).
• With your consent, to understand how the site and product are used so we can improve them (product analytics, see §6).
• To improve our products. We use audit data (not your account or contact details) in aggregated or de-identified form to build shared reference data, such as a question library, a database of public business information and statistics on which changes affect AI answers, and to publish aggregate research that does not identify you. Legal basis: our legitimate interest in improving the service (Art. 6(1)(f) GDPR). You can object at any time by emailing hello@theinnerview.app.
• To email you about your account, audits, or billing.
• With your consent, to send you the Scope newsletter and tips on getting recommended by AI (see §7). You can opt out at any time.

To generate findings, the page content and screenshots from URLs you submit — along with brand/product context extracted from those pages — are sent to our AI analysis providers: Anthropic (Claude, used by both Lens and Scope), OpenAI (GPT, used by Scope), and Google (Gemini, used by Scope). These providers are based in the United States, meaning this data is transferred outside the EU/EEA. We rely on [Standard Contractual Clauses / each provider's GDPR-compliant data processing terms — to be confirmed per provider's DPA] as the legal basis for these transfers. We do not sell this data, and these providers do not use it to train their general-purpose models under our commercial agreements with them [to be confirmed against each provider's current DPA terms].

Subscription and credit-pack payments are processed by Stripe. We never see or store your full card number — Stripe handles that under its own privacy policy and PCI-DSS compliance.

We use strictly-necessary cookies to keep you signed in (set by our authentication provider, Supabase) and two cookies, innerview_consent and innerview_marketing, that remember your cookie choice for 12 months. These are always active and don't require consent.

With your consent we use PostHog for product analytics: which pages are visited, which features are used (for example starting a free check, viewing a report, choosing a plan), and whether audits and payments complete. PostHog is hosted in the European Union (Frankfurt, EU cloud) and acts as our processor. We send categories and counts only: never the domains you audit, your questions, AI answers, report contents, passwords or payment details. Addresses of shared report links are stripped before anything is sent. If you are signed in and have accepted analytics, events are linked to your account ID, email address and plan so we can understand the journey from free check to paid plan. We do not record your screen (session replay is off) and we do not capture what you type.

PostHog only loads after you choose "Accept all" in the cookie banner, or switch on Analytics under "Choose". It then sets a first-party cookie and a browser-storage entry named ph_<project key>_posthog (a random visitor ID and session state, kept for up to 12 months). Until you accept, PostHog is not loaded and no analytics cookie is set. If you later reject analytics via "Cookie preferences" in the footer, we stop analytics and delete these cookies.

A few events are recorded by our servers rather than your browser, such as a completed payment or a finished audit. If you have not accepted analytics, these are recorded without any identifier, so they only add to anonymous totals and cannot be linked to you. Analytics events are kept for up to 12 months and then deleted.

To know how many people visit, our server also counts page views without cookies and without storing anything on your device, whatever your cookie choice (our legitimate interest in basic, aggregate traffic statistics). For each page view we keep the page, the referring website, campaign tags in the link and your country. Visitors are told apart by a one-way code made from your IP address and browser that changes every day and cannot be turned back into either. Your IP address is not stored or sent to PostHog. When the cookie banner is answered we also count, without any identifier, whether analytics and marketing were accepted.

Partner referrals. If you arrive through a link from a member of our partner program (a web address ending in ?ref= and a code), we set one functional first-party cookie, scope_ref. It holds only that partner's code and the date of your first visit, lasts up to 90 days, and is set only when the code belongs to an approved partner. It lets us credit the partner and apply the partner discount if you subscribe. It is needed for the partner program to work and is not used for analytics or advertising, so it is separate from your analytics choice. If you create an account, we record which partner referred you. The partner sees only that a customer signed up or paid, with the plan and the month of the first payment, never your name, email address or domains.

Marketing: Meta Pixel and Conversions API. Only if you choose "Accept all" or switch on "Marketing" under "Choose", we use the Meta Pixel in your browser and Meta's Conversions API from our servers. We use them only to measure the results of our ads. They send Meta the pages you view and event names (free check completed, sign-up, checkout started, purchase, with the value and currency of a purchase), your browser and device details, and, when you sign up or buy, your email address in hashed form. The recipient is Meta Platforms Ireland Limited. Marketing is off by default and the pixel is never loaded on admin pages. To withdraw, open "Cookie preferences" in the footer and switch Marketing off: we then stop sending events and delete the Meta cookies (_fbp, _fbc) from your browser. Events already sent stay with Meta under its own policy.

We don't run any other advertising or cross-site marketing cookies.

The Scope newsletter is sent by email. We send it only to people who asked for it: account holders who ticked "Send me tips on getting recommended by AI, and product news" at signup, at the free check or in Settings, and people without an account who signed up on our website. The legal basis is your consent (GDPR Art. 6(1)(a)).

Standard newsletter sign-ups on the website use double opt-in: we send one email with a confirmation link, and nothing else until you press the button it leads to. The agency playbook form is different: its disclosure says the same submission requests the playbook and joins the newsletter, so we send the playbook email immediately and record that consent without a confirmation step. As a record of your consent we keep your email address, the date and time you signed up (and confirmed, for standard sign-ups), the page you signed up on, the exact wording you agreed to and its version, your browser's user agent, and a one-way, salted hash of your IP address (never the address itself). Unconfirmed sign-ups receive no newsletter and are deleted after 30 days.

Every newsletter has a one-click unsubscribe link. Unsubscribing from any of our marketing emails turns off the newsletter and tips for that address everywhere, whether you signed up with an account or without one. We keep a record of the opt-out so we don't email you again. We count which issue an unsubscribe came from; we don't track opens or clicks in these emails. The emails are sent through Resend (our email provider, EU region); we never sell or share the list.

We keep your account and audit history for as long as your account is active, plus a reasonable period afterward for legal, accounting, and dispute-resolution purposes. You can request deletion of your account and associated data at any time (§9).

Under GDPR, you have the right to access, correct, delete, restrict, or export your personal data, and to object to certain processing. To exercise any of these rights, email hello@theinnerview.app. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (or your own country's supervisory authority if you're elsewhere in the EU/EEA).

We use industry-standard measures to protect your data, including encryption in transit, database row-level security, and restricted service-level access to production systems. No system is 100% secure, but we work to keep data access minimal and auditable.

The InnerView is not directed at, and we don't knowingly collect data from, anyone under 16.

We may update this policy from time to time. We'll update the "Last updated" date above and, for material changes, notify active subscribers by email.

Questions about this policy or your data: hello@theinnerview.app