Redwatcher
Privacy Policy
Last updated 25 August 2026
Redwatcher watches public Reddit conversations for the words you care about and tells you when something is worth acting on. This policy explains what we collect to do that, what we do with it, and the choices you have.
1. Who we are
Redwatcher (“Redwatcher”, “we”, “us”) operates this website and the monitoring service described on it. We are the data controller for the information described below. Questions about this policy, or about information we hold, go to privacy@redwatcher.com.
2. Information we collect
Your account. Your email address, and — if you sign in with Google — the name and profile picture Google returns. We never receive or store a password: sign-in is a one-time emailed link or Google, and nothing else.
What you ask us to watch. The keywords, brand and competitor names, subreddits, exclusions and scoring rules you configure, plus a description of what your project is about. If you give us a website address, we read that public page once to suggest a starting configuration.
Public Reddit content we match. To do its job the service reads public Reddit posts and comments and keeps the ones that match your configuration — the text, the author's public Reddit username, the subreddit, the permalink and the timestamp. We only ever read content that is publicly visible on Reddit. We do not log into Reddit as you, we cannot see private messages or private communities, and we never post anything.
Where you want alerts sent. An email address, or credentials you supply for your own Slack workspace, Telegram chat or webhook endpoint.
Ordinary technical records. Server logs containing IP address, browser type and pages requested, kept for security and debugging.
3. How we use it
- To run the monitoring you configured, and to deliver alerts to the channels you chose.
- To score how relevant a matched thread is, so you are told about the few worth your attention rather than everything that mentions a word.
- To operate, secure and improve the service, and to diagnose faults.
- To bill you, and to contact you about your account, security or material changes to the service.
Our lawful basis is the performance of our contract with you for the service itself, and our legitimate interest in keeping it secure, working and improving — and your consent where we ask for it.
4. Marketing, and your consent
We send marketing email only if you asked for it. Alerts and service messages are not marketing: they are what you signed up for, and they stop when you stop monitoring or close your account. Every marketing email carries a one-click unsubscribe, and unsubscribing never affects your alerts.
5. Who we share it with
We do not sell personal information, and we do not share it for anyone else's advertising. We use a small set of processors to run the service:
| Provider | What it does | Where |
|---|---|---|
| Supabase | Database and authentication | EU (Ireland) |
| Vercel | Application and website hosting | EU / global edge |
| Resend | Transactional and alert email | EU (Ireland) |
| Google (Gemini) | Scoring the relevance of matched threads | EU / US |
| Network providers | Retrieving public Reddit pages reliably | Various |
Each is bound by a data processing agreement and may use your information only to provide its service to us. We also share information where the law requires it, and to a buyer or successor if the business or its assets are transferred — in which case this policy continues to apply until you are told otherwise.
Model providers do not train on your data. Content sent for scoring is processed to return a score and is not used to train anyone's models.
6. How long we keep it
Your configuration and matched threads are kept while your account is open, so your inbox and history stay intact. Delete a project and its configuration and matched threads go with it. Close your account and we delete your account data within 30 days, except where we must keep records for legal, tax or accounting reasons. Server logs are kept for a short operational period and then discarded.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete, export or restrict the personal information we hold about you, and to object to processing based on legitimate interests. Write to privacy@redwatcher.com and we will respond within the time the law allows. You may also complain to your local data protection authority.
If you are a Reddit user whose public post we have matched and you want it removed from our systems, write to the same address and tell us the permalink.
8. Security
Data is encrypted in transit and at rest. Access to production systems is limited to those who need it. Credentials you supply for your own alert channels are used only to deliver your alerts. No system is perfectly secure, and we do not claim otherwise; if a breach affects you we will tell you and the relevant authority as the law requires.
9. International transfers
Our database and email are hosted in the EU. Some processors may handle data outside your country. Where information leaves the EEA or the UK, we rely on adequacy decisions or Standard Contractual Clauses.
10. Children
Redwatcher is a business tool and is not directed at children under 16. We do not knowingly collect their information; if we learn we have, we delete it.
11. Changes
If we change this policy we update the date above, and we tell account holders by email before a material change takes effect.