Privacy Policy
Version 2026-09-04.3 · Effective 4 September 2026
This policy explains what personal information Redwatcher collects, why we collect it, who we share it with, how long we keep it, and what rights you have.
1. Who we are, and our role
Redwatcher is a service of MentionLift Ltd, a company incorporated in England and Wales under company number 17438016, whose registered office is at 66 Paul Street, London EC2A 4NA, United Kingdom (“Redwatcher”, “we”, “us”). Redwatcher is supplied to businesses; see clause 2 of the Terms of Service.
We are the controller of your account information, our billing records, our server logs, and the public Reddit content the service reads. Where your own configuration causes us to process personal information on your behalf, we are your processor and act only on your instructions. Our processing terms for that role are available on request.
Contact us about this policy, or about information we hold, at privacy@redwatcher.com.
2. Information we collect
Account information. Your email address, and, if you sign in with Google, the name and profile picture Google returns. We do not receive or store a password. Sign-in is by one-time emailed link or by Google, and by no other method.
Your configuration. The keywords, brand and competitor names, subreddits, exclusions and scoring rules you set, and the description of your project. If you supply a website address, we read that public page once in order to suggest an initial configuration.
Public Reddit content that matches your configuration. The service reads public Reddit posts and comments and retains those that match. For each match we hold the text, the author's public Reddit username, the subreddit, the permalink and the timestamp. We read only content that is publicly visible on Reddit. We do not sign in to Reddit as you, we cannot access private messages or private communities, and we never post.
Alert destinations. An email address, or credentials you supply for your own Slack workspace, Telegram chat or webhook endpoint.
Technical records. Server logs containing IP address, browser type and pages requested, retained for security and fault diagnosis.
Website measurement. Records of how our own website and app are used — pages viewed, where you arrived from, approximate location derived from your IP address, device and browser, and how you interacted with the page. Section 5 sets out exactly what this contains, and what we deliberately do not keep.
Billing information. Our payment processor collects and holds payment card details. We do not receive or store them. We hold a customer reference, your subscription status and your invoice history.
3. Why we use it, and our lawful basis
We use the information above to run the monitoring you have configured and deliver alerts to the destinations you chose; to estimate the relevance of each match; to operate, secure and improve the service and diagnose faults; to take payment; and to contact you about your account, about security, and about material changes to the service.
Your information. Our lawful basis is performance of our contract with you, our legitimate interest in keeping the service secure and functioning, our legal obligations in respect of tax and accounting, and your consent where we ask for it.
Public Reddit content. Matched content may include the author's username and whatever they published. Our lawful basis is legitimate interests: enabling a business to learn that it, its products or its market are being discussed in public, and to take part in that discussion. We have assessed that interest against the interests and rights of the people who posted, and have limited the processing accordingly. We read only material that is already public. We retain only material matching a customer's configured terms. We keep no permanent archive. We do not construct profiles of individuals. We do not sell or disclose the content. Clause 6 of the Terms of Service prohibits customers from using the service to monitor or target individuals. Any person may object and have their content removed; see section 8.
4. Marketing
We send marketing email only where you have asked to receive it. Alerts and service messages are not marketing: they are the service you subscribed to, and they cease when monitoring stops or your account is closed. Every marketing email carries a one-click unsubscribe link. Unsubscribing does not affect your alerts.
5. Cookies
Advertising. We advertise Redwatcher elsewhere, and we may use advertising services that show our ads to people who have visited this site. Where we do, that service places a tag on this site and receives a record of your visit. Any such tag loads only after you have agreed to it, and never before. In the United Kingdom and the European Economic Area we ask first; if you decline, or do not answer, no advertising tag is loaded at all. We do not sell personal information and we do not pass it to data brokers.
As of the effective date of this version, no advertising or retargeting tag runs on this site. We update this policy, and the choice we offer you, before any tag goes live.
We do measure our own website. The measurement is entirely first-party: it runs on our own domain, the records go into our own database, and no third party receives them. For each page view we record the page, the page you arrived from, any campaign parameters in the link, your approximate location derived from your IP address (continent, country, region, city, postal district and the network operator), your device type, browser, operating system, screen size, language and whether you are using the light or dark theme, together with how long the page was visible, how far you scrolled, what you clicked, and how quickly the page loaded.
We do not store your IP address. It is converted, in the moment the request is handled, into an irreversible code that also mixes in the date and a secret we hold, and the address itself is discarded. That code changes every day. The analytics cookie described below does persist across days, and is what lets us tell a returning visitor from a new one.
The cookies and local storage we set fall into two groups. Strictly necessary: keeping you signed in and protecting the sign-in process, and remembering your light or dark theme preference. These are exempt from consent requirements, and the theme preference never leaves your device. Analytics: a first-party identifier, set as a cookie on our own domain, that lets us recognise a returning visitor and count how many people come back. It is set on every visit, without asking, and it is shared between redwatcher.com and app.redwatcher.com so that a visit and the account it leads to are one record rather than two. It contains a random value and nothing else: it is not readable by any script on the page, it is never sent to any other company, and it is not used for advertising. You can remove it at any time by clearing this site's data in your browser, and a browser set to refuse cookies is not blocked from anything on this site.
We retain these records for 25 months, after which they are deleted.
6. Who we share it with
We do not sell personal information. Where you have agreed to advertising tags (section 5), the advertising service receives a record of your visit and may also use it for its own purposes; that is the reason we ask before loading one. We use the following processors:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database and authentication | EU (Ireland) |
| Vercel | Application and website hosting | EU / global edge |
| Resend | Transactional and alert email | EU (Ireland) |
| Stripe | Payment processing and invoicing | EU / US |
| Google (Gemini) | Relevance scoring of matched content | EU / US |
Each processor is bound by a data processing agreement and may use the information only to provide its service to us. We also disclose information where required by law, and to a purchaser or successor if the business or its assets are transferred, in which case this policy continues to apply until you are notified otherwise.
Content sent for relevance scoring is processed in order to return a score. It is not used to train any model.
7. How long we keep it
While a project is on a paid subscription or a free trial, its configuration and matched content are retained in full and nothing expires. When a subscription is cancelled or a trial ends, that project’s matched content remains readable for one month from the date access ended, and is then deleted. Deleting a project deletes its configuration and its matched content immediately. If you close your account we delete your account data within 30 days, except where we are required to retain records for legal, tax or accounting purposes. Server logs are retained for a short operational period and then deleted.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, export or restrict the personal information we hold about you, and to object to processing carried out on the basis of legitimate interests. Write to privacy@redwatcher.com and we will respond within the period the law allows. You may also complain to your local data protection authority.
If you are a Reddit user whose public content we have matched and you want it removed from our systems, write to legal@redwatcher.com or privacy@redwatcher.com with the permalink. You do not need an account with us and you do not need to give a reason. This is also how to object to the processing described in section 3.
9. Security
Data is encrypted in transit and at rest. Access to production systems is restricted to those who require it. Credentials you supply for your own alert destinations are used only to deliver your alerts. No system is entirely secure. If a breach affects you, we will notify you and the relevant supervisory authority as required by law.
10. International transfers
Our database and email infrastructure are hosted in the EU. Some processors may handle data outside your country. Where information is transferred outside the EEA or the United Kingdom, we rely on an adequacy decision or on Standard Contractual Clauses.
11. Age
Redwatcher is supplied to businesses and is not offered to anyone under 18. It is not directed at children. We do not knowingly collect a child's information, and we delete it if we learn that we have.
12. Changes to this policy
Each version of this policy bears a version number and an effective date, stated at the head of this page. The version applicable to any processing is the version in force at the time.
Amendments which correct or clarify, and which do not reduce your rights, take effect on publication. A material amendment takes effect not less than 30 days after we email the address on your account, and, for a customer holding a subscription at that date, at the first renewal falling on or after the effective date. If you do not accept a material amendment, close your account before it takes effect. Superseded versions are retained and are available on request.
13. Contact
Data protection: privacy@redwatcher.com
Content removal and legal notice: legal@redwatcher.com
Postal address: MentionLift Ltd, 66 Paul Street, London EC2A 4NA, United Kingdom (company number 17438016, registered in England and Wales)