ReddMatch | Privacy Policy

This Privacy Policy explains how Streamlined Solutions, trading as ReddMatch ("ReddMatch", "we", "us", or "our"), collects, uses, discloses, and protects personal data when you visit reddmatch.com, create an account, subscribe to or use the ReddMatch service, contact us, or otherwise interact with us (collectively, the "Service").

ReddMatch is a Reddit customer discovery platform for SaaS founders, indie hackers, solopreneurs, and startup teams. It continuously indexes publicly accessible Reddit conversations and matches relevant conversations to product context supplied by users. Each matched conversation includes structured context and can generate a Reply Strategy that recommends how to participate naturally. ReddMatch does not post to Reddit or write a finished Reddit reply on a user's behalf.

1. Who Is Responsible for Your Data

The controller responsible for the personal data described in this Policy is:

Legal operator: Streamlined Solutions
Trading name: ReddMatch
Address: 72 Vasile Alecsandri Street, Apartment 24, Baia Mare, Romania
Email: support@reddmatch.com

2. Scope and Our Role

This Policy applies to personal data we process in connection with ReddMatch. It does not govern the independent privacy practices of Reddit or other third-party websites and services.

For account, project, subscription, analytics, support, and Service data, we generally act as the data controller. Our service providers process certain data for us under their own terms and data-processing arrangements. Some providers, including Stripe, may also act as independent controllers for parts of their processing where required by law.

ReddMatch also processes information made publicly available on Reddit. Sections 3.6 and 12 explain this processing and the choices available to Reddit authors.

3. Personal Data We Collect

3.1 Account and Identity Data

When you register or sign in, we may process:

your email address;
your name, profile image, authentication identifiers, and sign-in method, where supplied through Clerk or a connected identity provider such as Google;
account and session information; and
security, verification, and authentication event data.

Authentication and user-management services are provided by Clerk. If you use a third-party sign-in option, that provider may process your data under its own privacy policy.

3.2 Project and Service Data

When you create or use a project, we process information such as:

project name and website URL;
website content retrieved from the URL you submit;
product name and summary;
customer problem, desired customer outcome, and ideal customer profiles;
generated embeddings used to match project context with relevant conversations;
matched leads and your association with those leads;
Reply Strategy recommendations, talking points, model information, and usage counts; and
project creation, update, and deletion timestamps.

You can review and edit the extracted project information before or after saving it. Please do not submit confidential, sensitive, or third-party personal data that you are not authorized to provide.

3.3 Subscription and Transaction Data

If you purchase a subscription or other paid offering, we may process:

your email, name, billing address, tax information, and Stripe customer identifiers;
the selected product, price, plan, subscription status, renewal period, and cancellation status;
payment status and limited transaction records; and
entitlements such as project and Reply Strategy limits.

Stripe processes payment-card details. We do not store or have access to your complete card number or security code.

3.4 Usage, Device, and Technical Data

When you visit or use the Service, we and our providers may process:

IP address and approximate location derived from it;
browser, device, operating system, and language information;
pages viewed, referring URLs, clicks, feature usage, and session events;
timestamps, request metadata, error logs, and diagnostic data; and
cookie, local-storage, consent, and similar identifiers.

We also use IP-derived identifiers for security and rate limiting.

If you create an account, complete certain purchases, subscribe to updates, or contact us, we may process your email address and the content of your message. We may also process delivery, bounce, complaint, unsubscribe, and engagement information associated with emails sent through our providers.

You can unsubscribe from promotional email using the link in an email or by contacting us. Service, security, billing, and other transactional communications may still be sent where necessary to operate your account.

3.6 Public Reddit Data

ReddMatch indexes and analyzes content and metadata that is publicly available on Reddit, which may include:

Reddit post identifiers, titles, body text, authors' public usernames, subreddit names, flair, scores, comment counts, timestamps, URLs, and permalinks;
signals derived from public posts, such as intent type, intent score, pain summary, desired outcome, and poster context; and
technical and processing timestamps related to collection and matching.

We use this information to provide conversation discovery, relevance matching, lead context, and Reply Strategy features. We do not use ReddMatch to send messages or publish replies through a Reddit account.

Public Reddit content may contain personal data chosen by an author for publication. We do not intentionally seek special-category or highly sensitive personal data. Users must not use ReddMatch to target, discriminate against, harass, or make consequential decisions about individuals based on sensitive information.

4. Where We Obtain Data

We obtain personal data:

directly from you when you create an account, submit a website, configure a project, subscribe, join the newsletter, or contact us;
automatically from your browser or device when you use the Service;
from Clerk and any identity provider you choose for authentication;
from Stripe in connection with purchases and subscriptions;
from publicly accessible Reddit pages and data sources used to operate the conversation index; and
from the website URL you ask us to analyze.

If you submit a website URL, you confirm that you are authorized to have its publicly accessible content retrieved and analyzed for your project.

5. Why We Process Data and Our Legal Bases

Where the GDPR, UK GDPR, or similar laws apply, we rely on the following legal bases:

5.1 Performance of a Contract

We process account, project, matching, Reply Strategy, subscription, and support data to provide the Service you request, administer your plan, and respond to service-related requests.

5.2 Legitimate Interests

We process data as necessary for legitimate interests including:

operating, securing, troubleshooting, and improving ReddMatch;
preventing fraud, abuse, and unauthorized access;
measuring Service performance and understanding feature usage;
matching product context with relevant public Reddit conversations;
organizing and summarizing public Reddit content for business discovery and research; and
establishing, exercising, or defending legal claims.

When we rely on legitimate interests, we consider the nature and public context of the data, the reasonable expectations of affected individuals, the limited purpose of the processing, and available safeguards and objection rights.

We rely on consent where required for non-essential analytics, cookies or similar technologies, and certain promotional communications. You may withdraw consent at any time without affecting processing that occurred before withdrawal.

5.4 Legal Obligations

We may process transaction, tax, accounting, security, and other data to comply with applicable law, lawful requests, and regulatory obligations.

6. AI-Assisted Processing

ReddMatch uses OpenAI API services to:

analyze website content and extract product context;
create numerical embeddings used for semantic matching; and
generate Reply Strategy recommendations from project context and public post context.

Website content, project fields, and relevant public Reddit post context may be sent to OpenAI for these purposes. ReddMatch stores the resulting project information, embeddings, and Reply Strategy output as needed to provide the Service.

AI-generated or AI-assisted results may be incomplete or inaccurate and should be reviewed by the user. ReddMatch does not use these features to make decisions that produce legal or similarly significant effects about users or Reddit authors, and it does not generate or publish a final Reddit reply on a user's behalf.

7. Cookies, Local Storage, and Analytics

We use essential technologies for authentication, security, session management, consent preferences, and core Service functionality. These may be required for the Service to work.

With your consent where required, we use PostHog and Google Analytics to understand visits and feature usage. Google Analytics is initialized with analytics storage denied unless you accept analytics. PostHog is configured to respect the consent choice presented through our cookie banner. Your selection is stored in your browser's local storage under a consent preference.

You can accept or decline analytics through the cookie banner. You can also clear site data in your browser to reset the stored choice. Blocking essential cookies may prevent authentication or other parts of the Service from functioning.

We do not use third-party advertising cookies to sell targeted advertising space.

We do not sell personal data. We disclose data only as reasonably necessary for the purposes described in this Policy, including to:

Clerk for authentication, account management, and security;
Stripe for checkout, subscriptions, billing, tax calculation, invoicing, fraud prevention, and customer portal services;
Vercel for website and application hosting, delivery, logs, and infrastructure;
Supabase and PostgreSQL infrastructure for database hosting and storage;
Amazon Web Services for object storage, such as project favicons;
ScrapeBadger to retrieve content from website URLs submitted for analysis;
OpenAI for product analysis, embeddings, and Reply Strategy generation;
PostHog and Google Analytics for consent-based product and website analytics;
Mailchimp for newsletter list management and promotional emails;
Resend for transactional and service emails; and
professional advisers, authorities, courts, or other parties where reasonably necessary to comply with law, protect rights and safety, complete a corporate transaction, or establish or defend legal claims.

Third-party services process data under their own contracts, privacy notices, and legal obligations. A provider's role may vary depending on the processing it performs.

9. International Data Transfers

Some providers and their subprocessors operate outside your country, including in the United States. Where required, we rely on recognized transfer mechanisms and safeguards such as adequacy decisions, the EU-U.S. Data Privacy Framework where applicable, and the European Commission's Standard Contractual Clauses, together with supplementary measures where appropriate.

10. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. In general:

account and project data is retained while your account or project remains active and is deleted or de-identified after deletion, subject to backups, security logs, and legal requirements;
project data and related generated Reply Strategies are deleted from our active database when the associated account is deleted, subject to provider and backup retention;
billing and transaction records may be retained for the period required by tax, accounting, anti-fraud, and legal rules;
newsletter data is retained until you unsubscribe or the list is otherwise cleaned, subject to a limited suppression record needed to honor your opt-out;
consent and security records may be retained as evidence of preferences and to protect the Service; and
public Reddit data is retained while relevant to the conversation index, unless removed, de-identified, or no longer needed.

Backups and provider systems may retain deleted data for a limited additional period before it is overwritten or securely deleted.

11. Your Privacy Rights

Depending on your location and subject to legal conditions and exceptions, you may have the right to:

request access to personal data we hold about you;
correct inaccurate or incomplete data;
request deletion of personal data;
restrict or object to certain processing, including processing based on legitimate interests;
receive certain data in a portable format;
withdraw consent at any time;
opt out of promotional communications;
appeal a decision we make on a privacy request where applicable; and
lodge a complaint with your local data-protection authority.

To exercise a right, contact us using the details in Section 17. We may need to verify your identity and clarify the scope of your request. Authorized agents may submit requests where applicable law permits it.

If you are in the European Economic Area, you may complain to the supervisory authority in the country where you live, work, or believe an infringement occurred. ReddMatch's supervisory authority in Romania is the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).

12. Requests from Reddit Authors

If public Reddit content associated with your username appears in ReddMatch, you may contact us to request access, correction, deletion, or objection, as applicable. Please provide the Reddit permalink or post URL and enough information for us to evaluate and verify the request.

Removing information from ReddMatch does not remove the original content from Reddit, search engines, archives, or other third-party services. Requests concerning the original Reddit post should also be directed to Reddit.

13. Children's Privacy

ReddMatch is intended for business users who are at least 18 years old. We do not knowingly collect account data from children. If you believe a child has provided personal data through an account, contact us so we can investigate and take appropriate action.

Public Reddit content may not reliably disclose an author's age. If you believe indexed content concerns a child, contact us with the relevant URL for priority review.

14. Security

We use reasonable technical and organizational safeguards designed to protect personal data, including HTTPS, access controls, authenticated account areas, webhook signature verification, input validation, rate limiting, and provider security controls. No system is completely secure, and we cannot guarantee absolute security.

We do not sell personal data for money. We also do not use personal data for cross-context behavioral advertising. If applicable law gives you additional opt-out rights, you may exercise them by contacting us.

16. Changes to This Policy

We may update this Policy to reflect changes to ReddMatch, our providers, or applicable law. We will post the revised version on this page and update the date above. If a change materially affects your rights, we will provide additional notice where required.

17. Contact Us

For privacy questions, requests, or complaints, contact:

Legal operator: Streamlined Solutions
Address: 72 Vasile Alecsandri Street, Apartment 24, Baia Mare, Romania
Email: support@reddmatch.com

Mobile Sidebar

Privacy Policy