Privacy Policy

The InnerView (Lens + Scope) is operated by Below The Fold, a company registered in Greece (VAT number EL154450996), registered address Koritsas 3, Melissia, Athens, Greece ("we", "us", "Below The Fold"), acting as the data controller for the personal data described below.

• Account data — your email address, and profile details you add.
• Submitted store data — the store URL(s) you audit, page screenshots we capture, and page content/signals extracted from those public pages (brand name, product titles, prices, structural signals).
• Usage & billing data — audit history, credit balance and spend, subscription tier, and payment metadata (handled by Stripe — see §5).
• Support communications — anything you send us at hello@belowthefold.gr.

• To run the audit you requested and show you the results.
• To operate your account, billing, and credits.
• To personalize findings to your store's actual content.
• To secure the service and prevent abuse (e.g. rate limiting).
• To email you about your account, audits, or billing (see also our roadmap for product-update emails, which you'll be able to opt out of).

To generate findings, the page content and screenshots from URLs you submit — along with brand/product context extracted from those pages — are sent to our AI analysis providers: Anthropic (Claude, used by both Lens and Scope), OpenAI (GPT, used by Scope), and Google (Gemini, used by Scope). These providers are based in the United States, meaning this data is transferred outside the EU/EEA. We rely on [Standard Contractual Clauses / each provider's GDPR-compliant data processing terms — to be confirmed per provider's DPA] as the legal basis for these transfers. We do not sell this data, and these providers do not use it to train their general-purpose models under our commercial agreements with them [to be confirmed against each provider's current DPA terms].

Subscription and credit-pack payments are processed by Stripe. We never see or store your full card number — Stripe handles that under its own privacy policy and PCI-DSS compliance.

We use strictly-necessary cookies to keep you signed in (set by our authentication provider, Supabase). These are always active and don't require consent.

We also use analytics cookies to understand aggregate site usage and improve the product. These only load after you accept them in the cookie banner shown on your first visit — until you accept, no analytics cookie is set. You can change your choice at any time via "Cookie preferences" in the footer.

We don't run advertising or cross-site marketing cookies.

We keep your account and audit history for as long as your account is active, plus a reasonable period afterward for legal, accounting, and dispute-resolution purposes. You can request deletion of your account and associated data at any time (§8).

Under GDPR, you have the right to access, correct, delete, restrict, or export your personal data, and to object to certain processing. To exercise any of these rights, email hello@belowthefold.gr. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (or your own country's supervisory authority if you're elsewhere in the EU/EEA).

We use industry-standard measures to protect your data, including encryption in transit, database row-level security, and restricted service-level access to production systems. No system is 100% secure, but we work to keep data access minimal and auditable.

The InnerView is not directed at, and we don't knowingly collect data from, anyone under 16.

We may update this policy from time to time. We'll update the "Last updated" date above and, for material changes, notify active subscribers by email.

Questions about this policy or your data: hello@belowthefold.gr