Privacy Policy

PolicyWatch is operated by Mountain Street Management LLC (“we”, “us”). PolicyWatch is a business service that monitors the publicly available Terms of Service and Privacy Policies of software vendors and alerts teams when they change. This policy explains what information we collect when you use PolicyWatch and how we handle it.

• Account information: your name, email address, company name and a securely hashed password. If you sign in with Google, we receive your name, email address and profile picture from Google. We do not receive your Google password or access to any other Google data.
• Workspace content: the vendors you add (names, website and policy URLs, categories), CSV files you import, the policy text we retrieve for those vendors, and the risk scores, summaries and reports we generate.
• Team information: email addresses of colleagues you invite and the roles you assign them.
• Integration settings: Slack webhook URLs you provide for alerts, and API keys you create (stored so we can verify requests).
• Billing information: payments are processed by Stripe. We store your Stripe customer and subscription identifiers, plan and renewal status. We never see or store your full card number.
• Technical information: session cookies needed to keep you signed in, and standard server logs (such as IP address, browser type and request times) used for security and troubleshooting.

• To provide the service: monitoring vendor policies, detecting changes, scoring risk and producing reports.
• To send the alerts you configure, by email, in the app or to Slack, and to send team invitations.
• To manage your subscription, process payments and provide customer support.
• To secure the service, prevent abuse and fix problems.

To summarize policy changes and score risk, we send the text of vendor policies to a third-party AI model provider for processing. This text comes from vendors’ public web pages. We do not use your account information to train AI models, and we do not sell your data.

We do not sell or rent your personal information. We share it only with service providers that help us run PolicyWatch, under their own privacy and security terms:

• Hosting, database and file storage providers that run the application and store your data.
• Stripe, for payment processing.
• Google, if you choose to sign in with Google.
• AI model providers, for policy analysis as described above.
• Email delivery providers that send alerts and invitations, and Slack if you connect it.

We may also disclose information if required by law or to protect the rights and safety of our users and the service.

We keep your information for as long as your account is active. If your subscription or trial ends, your workspace data is kept so you can resume later. You can ask us to delete your account and associated data at any time by emailing us; we will do so within 30 days, except for records we must keep for legal or accounting purposes (such as billing records).

Data is transmitted over encrypted HTTPS connections. Passwords are stored as one-way hashes, access to your workspace is limited to members of your organization, and payment details are handled by Stripe. No system is perfectly secure, but we take reasonable measures to protect your information.

You can view and update your profile in the app’s settings, manage notification preferences, and cancel your subscription through the billing page. Depending on where you live, you may have rights to access, correct, export or delete your personal information, or to object to certain processing. To exercise any of these rights, contact us at the address below.

PolicyWatch is a business service and is not intended for anyone under 16. We do not knowingly collect information from children.

We may update this policy from time to time. When we make material changes, we will update the date below and, where appropriate, notify account owners by email.