Privacy Notice

Gap is operated by Innovide LLC ("Innovide", "we", "us"). Innovide LLC is the data controller responsible for the personal data processed through the Service and determines the purposes and means of that processing.

• Account data — your name, email address, company name, industry, and login credentials.
• Content data — the websites and competitors you choose to monitor and the scan results we generate for you.
• Usage & device data — telemetry about how you use the Service, device identifiers, and IP address.
• Support data — messages you send to our support team.

• To create and manage your account (performance of a contract).
• To provide the Service and generate your reports and intelligence (performance of a contract).
• To secure the Service and prevent fraud (legitimate interests).
• To improve and develop the product (legitimate interests).
• To provide customer support (performance of a contract / legitimate interests).
• To send service or marketing communications where permitted (consent or legitimate interests).

Payment information is collected and processed by Paddle as Merchant of Record; we do not store your full payment card details.

• Service providers / subprocessors — our cloud hosting backend, AI providers that generate insights, and analytics and support tooling.
• Merchant of Record — Paddle, for the sale of our product, subscription management, payments, tax compliance, and invoicing.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where we are required to do so by law.

We do not sell your personal data.

Where personal data is transferred outside your region (including outside the UK/EEA), we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions to protect it.

We retain personal data for as long as your account is active and as needed to provide the Service. Scan history is retained so you can track changes over time. In general, we keep account and content data for the life of your account and delete or anonymise it within 90 days of account deletion, unless a longer period is required by law. Support records are typically kept for up to 24 months.

Depending on your location, you have the right to access, correct, delete, restrict, or port your personal data, and to object to or withdraw consent for certain processing. If you are in the UK or EEA, you also have the right to lodge a complaint with your supervisory authority. We aim to respond to requests within one month.

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and per-organization data isolation enforced by row-level security policies.

We use essential cookies and local storage to keep you signed in and to remember your preferences, and analytics cookies to understand usage and improve the Service. You can manage cookie preferences through your browser settings.

For any privacy question or to exercise your rights, contact Innovide LLC at privacy@innovide.io.