Privacy Policy

1. Who we are

CloneWatch ("we", "our", or "us") is a brand protection platform that helps businesses detect domain clones, fake social accounts, and lookalike advertisements. Our website is clonewatch.app.

2. What data we collect

• Account data: email address and password (hashed) when you register.
• Brand data: domain names, Telegram handles, and keywords you add to monitor.
• Usage data: pages visited, actions performed, timestamps — used to improve the product.
• Telegram chat ID: only if you connect your Telegram account for alert notifications.
• Payment data: handled entirely by Stripe. We never store card details.

3. How we use your data

• To provide and operate the CloneWatch service.
• To scan the internet for threats related to your brand.
• To send you threat alerts via Telegram or email.
• To process payments through Stripe.
• To improve our detection algorithms and AI models.

4. Data storage and security

Your data is stored in a PostgreSQL database hosted on Render.com in the United States. All data in transit is encrypted via TLS/HTTPS. Passwords are hashed using bcrypt and are never stored in plain text. We do not sell your data to third parties.

5. Third-party services

We use the following third-party services:

• Stripe — payment processing (Stripe Privacy Policy)
• Render.com — cloud hosting
• Telegram Bot API — alert notifications (only if you opt in)
• Anthropic API — AI-powered threat analysis

6. Cookies

We use only essential cookies necessary for authentication (session tokens via NextAuth.js). We do not use tracking or advertising cookies.

7. Data retention

We retain your account data for as long as your account is active. Detected threats and scan history are retained for up to 12 months. You may request deletion of your data at any time.

8. Your rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and all associated data.
• Export your data in a machine-readable format.

To exercise any of these rights, contact us at the email below.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact

If you have any questions about this Privacy Policy or how we handle your data, contact us at: privacy@clonewatch.app