Get early access

Get early access

Last updated: 29 March 2026

Last updated: 29 March 2026

Privacy policy

Kompear is a competitive intelligence platform for the Shopify App Store, operated by Scayla Apps Ltd. We take your privacy seriously. This policy explains what personal data we collect, why we collect it, how we use it, and your rights under UK GDPR and applicable data protection law. By using Kompear, including signing up to our waitlist or creating an account, you agree to the practices described in this policy. The data controller is Scayla Apps Ltd. For privacy-related queries, contact us at privacy@scayla.io.

Kompear is a competitive intelligence platform for the Shopify App Store, operated by Scayla Apps Ltd. We take your privacy seriously. This policy explains what personal data we collect, why we collect it, how we use it, and your rights under UK GDPR and applicable data protection law. By using Kompear, including signing up to our waitlist or creating an account, you agree to the practices described in this policy. The data controller is Scayla Apps Ltd. For privacy-related queries, contact us at privacy@scayla.io.

What data we collect

  • When you join the waitlist: your name, email address, company or app name, and self-reported role (developer, agency, investor, or other description).

  • When you create an account: your name, email address, and login credentials. We also store the Shopify App Store developer profile and apps you connect to Kompear, and the competitors you choose to track.

  • When you use the platform: your feature usage and activity within the app, including which features you use, how frequently, and any feature requests you submit or upvote. We collect this solely to understand how the product is being used and to improve it.

  • Data we analyse on your behalf: Kompear analyses publicly available data from the Shopify App Store — including app listings, ratings, reviews, and category rankings — and applies proprietary analytical methods to surface competitive intelligence. This data relates to apps and developers on the Shopify platform, not to you personally.

  • Technical data: IP address, browser type, device information, and session data collected automatically when you use the platform or visit our website.

How we use your information

We use your data for the following purposes, each with a corresponding legal basis under UK GDPR:

  • Managing your waitlist place and communicating about early access: legitimate interests and consent.

  • Providing and operating your Kompear account: performance of a contract.

  • Sending product updates and the weekly competitive intelligence digest: consent, which you may withdraw at any time.

  • Improving the product through usage analytics: legitimate interests. Customer support — legitimate interests and contract.

  • Complying with legal obligations: legal obligation.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.

We use your data for the following purposes, each with a corresponding legal basis under UK GDPR:

  • Managing your waitlist place and communicating about early access: legitimate interests and consent.

  • Providing and operating your Kompear account: performance of a contract.

  • Sending product updates and the weekly competitive intelligence digest: consent, which you may withdraw at any time.

  • Improving the product through usage analytics: legitimate interests. Customer support — legitimate interests and contract.

  • Complying with legal obligations: legal obligation.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.

Analytics

We use PostHog Cloud EU within the Kompear platform to analyse feature usage and product behaviour. PostHog Cloud EU is a managed analytics service hosted on servers based in Frankfurt, Germany, operated within the European Economic Area. We use Google Analytics on our marketing website to understand visitor traffic patterns. Both tools may collect anonymised or pseudonymised data about how you interact with our services. You can opt out of Google Analytics via your browser settings or available opt-out extensions.

We use PostHog Cloud EU within the Kompear platform to analyse feature usage and product behaviour. PostHog Cloud EU is a managed analytics service hosted on servers based in Frankfurt, Germany, operated within the European Economic Area. We use Google Analytics on our marketing website to understand visitor traffic patterns. Both tools may collect anonymised or pseudonymised data about how you interact with our services. You can opt out of Google Analytics via your browser settings or available opt-out extensions.

Who we share your data with

We do not sell your personal data. We share it only with trusted third-party processors who act strictly on our instructions:

  • Neon.tech, DigitalOcean, and/or Supabase, AWS, and Cloudflare: database, infrastructure hosting and content delivery.

  • Framer: marketing website hosting and delivery.

  • Brevo: email delivery and CRM.

  • Freshchat: customer support.

  • PostHog Cloud EU: product analytics, hosted in Frankfurt, Germany.

  • Google Analytics: website analytics.

All processors are contractually required to handle your data securely and in accordance with applicable law. Where processors are based outside the UK, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement or Standard Contractual Clauses, as applicable.
We may also disclose data where required by law, regulation, or valid court order.

We do not sell your personal data. We share it only with trusted third-party processors who act strictly on our instructions:

  • Neon.tech, DigitalOcean, and/or Supabase, AWS, and Cloudflare: database, infrastructure hosting and content delivery.

  • Framer: marketing website hosting and delivery.

  • Brevo: email delivery and CRM.

  • Freshchat: customer support.

  • PostHog Cloud EU: product analytics, hosted in Frankfurt, Germany.

  • Google Analytics: website analytics.

All processors are contractually required to handle your data securely and in accordance with applicable law. Where processors are based outside the UK, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement or Standard Contractual Clauses, as applicable.
We may also disclose data where required by law, regulation, or valid court order.

Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Access to personal data is restricted to personnel who need it to perform their role. Our infrastructure providers maintain their own security certifications and standards. We review our security practices regularly and update them in line with industry best practice.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Access to personal data is restricted to personnel who need it to perform their role. Our infrastructure providers maintain their own security certifications and standards. We review our security practices regularly and update them in line with industry best practice.

How long we keep your data

Waitlist data is retained until you request deletion or until you are migrated to a full account on launch. Account data is retained for the duration of your account and for up to two years after closure for legal and business record purposes. Usage analytics data may be retained in aggregated or anonymised form indefinitely. You may request deletion of your personal data at any time by contacting privacy@scayla.io.

Waitlist data is retained until you request deletion or until you are migrated to a full account on launch. Account data is retained for the duration of your account and for up to two years after closure for legal and business record purposes. Usage analytics data may be retained in aggregated or anonymised form indefinitely. You may request deletion of your personal data at any time by contacting privacy@scayla.io.

Your rights

Under UK GDPR you have the right to: access the personal data we hold about you; correct inaccurate data; request erasure of your data (the right to be forgotten); restrict processing of your data; receive your data in a portable, machine-readable format; object to processing based on legitimate interests; and withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.

To exercise any of these rights, email us at privacy@scayla.io. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data appropriately.

Under UK GDPR you have the right to: access the personal data we hold about you; correct inaccurate data; request erasure of your data (the right to be forgotten); restrict processing of your data; receive your data in a portable, machine-readable format; object to processing based on legitimate interests; and withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.

To exercise any of these rights, email us at privacy@scayla.io. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data appropriately.

Changes to this policy

We may update this policy from time to time to reflect changes in our services, technology, or the law. If we make significant changes we will notify you by email or by a prominent notice within the platform. The date at the top of this page reflects when the policy was last updated. We encourage you to review this page periodically.

Contact us

If you have questions or concerns about this policy or how we handle your data, please email us at privacy@scayla.io. We will respond within 30 days.

Finally, you can see the full picture.

Get early access

Finally, you can see the full picture.

Get early access

Finally, you can see the full picture.

Get early access