Privacy policy

Stalkr is a brand mention monitoring tool. We collect the minimum information needed to run an account for you and to surface public posts from Reddit, X, and YouTube that match the keywords you choose to track.

• We do not sell your personal data.
• We do not train AI or machine learning models on data retrieved from Reddit, X, or YouTube.
• Public mentions retrieved from third-party platforms are stored for at most 90 days and then deleted.
• You can delete your account and all associated data at any time from your settings.

This policy should be read together with our terms of service.

Stalkr is operated by JustShipIt Pte. Ltd., 10 PETAIN ROAD, #04-01 International Plaza, Singapore 068914. References to “Stalkr”, “we”, “us” or “our” mean JustShipIt Pte. Ltd. The data controller for personal data processed under this policy is JustShipIt Pte. Ltd. You can reach us at hello@stalkr.ai.

Account information

When you sign up, we collect your email address. If you sign in with Google we also receive your name and profile picture from your Google account. We do not request access to your Gmail, Drive, contacts, or any other Google service.

Content you create in the product

This includes the projects, keywords, categories, saved views, and notes you create inside Stalkr. We use this information to operate the service.

Billing information

Paid subscriptions are processed by Stripe. We never see or store your card details. We store the Stripe customer ID, the subscription status, and the price you are subscribed to so we can give you the right plan limits.

Usage and diagnostics

We log standard request metadata (timestamp, route, response code, anonymized IP) for debugging, abuse prevention, and rate limiting. We do not run third-party advertising trackers.

Cookies and authentication

We set a small number of strictly necessary cookies to keep you signed in and to remember your UI preferences. See the Cookies section.

• To create and operate your account.
• To match your keywords against public posts on supported platforms and surface results inside Stalkr.
• To send you service emails (sign-in codes, alerts you opted into, billing receipts, security notices).
• To prevent abuse, enforce our terms, and meet legal obligations.
• To improve product reliability through aggregated, non-identifying analytics.

We do not use your personal data for behavioral advertising and we do not sell or rent it to third parties.

Stalkr retrieves public posts from Reddit, X, and YouTube on your behalf. The sections below describe how we handle each source. We always respect the platform’s terms of service, rate limits, and developer policies.

Reddit

We use the official Reddit Data API via OAuth in strict compliance with the Reddit Terms of Service, the Reddit Data API Terms, and the Reddit Responsible Builder Policy.

• Read-only access. We never post, comment, vote, subscribe, moderate, or DM on Reddit.
• The only endpoints we call are public search and post-fetch endpoints.
• For each matched post we store: post ID, permalink, subreddit, title, an excerpt of the body (up to 280 characters), author username, score, comment count, created timestamp.
• We do not derive sensitive characteristics about Redditors and do not attempt to re-identify or de-anonymize anyone.
• We do not sell, license, or share Reddit data with third parties.
• We do not use Reddit data to train any AI or machine learning model.
• We honor Reddit data deletion: if a post or account is deleted on Reddit, the corresponding mention is removed from Stalkr on next refresh.

X (formerly Twitter)

We use the official X API to retrieve public posts that match your keywords. We store the post ID, text, public engagement counts, author handle and display name, and a link back to the canonical X URL. We comply with the X Developer Agreement and Policy, including content redistribution and deletion requirements.

YouTube

We use the YouTube Data API v3 with a server-side API key. We retrieve public video metadata (title, description, thumbnail, channel name and avatar, public statistics) for videos that match your keywords. Use of the YouTube API is governed by the YouTube Terms of Service and the Google Privacy Policy. You can review and revoke any access granted to applications via the Google security settings page.

We use a third-party AI provider (OpenAI) to perform sentiment classification and urgency scoring on the mentions retrieved for your account. We send only the minimum context needed for that classification and we do not authorize the provider to retain the data for model training.

We do not train, fine-tune, or evaluate any AI or machine learning model on data retrieved from Reddit, X, or YouTube, and we do not export this data for any third party to do so.

We share information only with service providers we use to run Stalkr, and only the minimum needed for them to perform their function:

• Hosting and infrastructure (Vercel, Upstash, MongoDB Atlas).
• Email delivery (Resend).
• Payments (Stripe).
• Sentiment and urgency classification (OpenAI).

We may also disclose information if required by law, to protect the rights and safety of Stalkr and its users, or in connection with a corporate transaction such as a merger or acquisition. We will never sell your personal data.

• Account information: kept while your account is active. Deleted within 30 days of account closure.
• Public mentions retrieved from Reddit, X, and YouTube: stored for at most 90 days and then deleted automatically.
• Billing records: retained as required by tax and accounting law (typically 7 years).
• Server logs: retained for up to 30 days.

You can delete any individual mention from the UI at any time. Deleting your account purges all stored Reddit, X, and YouTube data within 24 hours.

Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing. You can exercise most of these rights directly in your account settings. For anything else, email hello@stalkr.ai and we will respond within 30 days.

If you are in the EEA, UK, or Switzerland, our legal basis for processing is contract (to provide the service you signed up for), legitimate interests (security, fraud prevention, product improvement), and consent (for optional emails).

We use industry-standard safeguards including TLS in transit, encryption at rest for our database, secret rotation for API keys, principle-of-least-privilege access for our team, and rate limiting on authentication endpoints. No service can guarantee perfect security, but we work hard to protect your data.

Stalkr uses strictly necessary cookies to keep you signed in and to remember UI preferences. We do not use advertising or third-party tracking cookies.

Stalkr is operated from Singapore and uses infrastructure providers based in the United States and Europe. By using Stalkr you acknowledge that your information may be transferred to and processed in those jurisdictions.

Stalkr is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.

We may update this policy from time to time. If we make material changes we will notify you by email or in-product banner. The “Last updated” date at the top of this page always reflects the current version.

Questions about this policy or your data? Email hello@stalkr.ai or write to JustShipIt Pte. Ltd., 10 PETAIN ROAD, #04-01 International Plaza, Singapore 068914.