PRIVACY POLICY

Who we are (data controller)

The data controller for personal data processed through RedditHunt is LadderFox B.V., a Dutch limited company.

• Legal name: LadderFox B.V.
• KvK: 98357441
• Registered address: Bunderbeemd 21, 4824 NN Breda, Netherlands
• Privacy contact: info@reddithunt.xyz

Throughout this policy, “we” and “us” refer to LadderFox B.V.

What we collect

• Account data: email, name (optional), hashed password.
• Product data: the product name, description, URL, and keywords you give us so we can run scans.
• Billing data: we store a Stripe customer ID and subscription state. Card details are processed entirely by Stripe — we never see them.
• Usage data: which pages you open and which scans you run, used for product analytics (PostHog).
• Public Reddit data: we cache search results and post snippets so we don’t re-fetch them unnecessarily.

What we don’t collect

• We don’t collect your Reddit password — you never log in to Reddit through us.
• We don’t sell your data. Ever.
• We don’t track you across the web.

Legal bases (GDPR Art. 6)

• Contract (Art. 6(1)(b)) for account, product and billing data — necessary to provide the Service you signed up for.
• Legitimate interests (Art. 6(1)(f)) for usage analytics and security logs — to keep the Service running well and protect it from abuse.
• Consent (Art. 6(1)(a)) for marketing emails — you can withdraw at any time from Settings or via the unsubscribe link.

How we use it

Account, product and billing data is used to provide the Service: running scans, generating drafts, sending you the daily digest, and processing your subscription. Usage data helps us understand which features matter so we know what to improve.

Sub-processors

We rely on a small number of vendors. Each is contractually bound to keep your data secure.

• Neon — Postgres database hosting, EU region.
• Vercel — application hosting.
• Stripe — payment processing (acts as data controller for card data).
• OpenAI — AI draft generation; product details are sent to generate replies.
• Resend — transactional email delivery.
• Serper — Google search results for Reddit content discovery.
• Upstash — rate-limit storage (optional).
• PostHog — product analytics (EU instance).

International transfers

Most processing happens in the EU. Where a sub-processor (e.g. OpenAI, Stripe) processes data in the United States, transfers rely on Standard Contractual Clauses or the EU–US Data Privacy Framework certification.

Cookies

We use a session cookie to keep you signed in and a CSRF cookie for form security. We do not use advertising or third-party tracking cookies. PostHog analytics use a first-party cookie on our domain.

Your rights (GDPR Articles 15–22)

You have the right to access, rectify, delete, restrict processing of, or port your personal data, and to object to processing based on legitimate interests.

• Update your name or plan from Settings.
• Toggle marketing/digest emails from Settings → Email Preferences.
• Delete your account from Settings → Danger Zone (this also cancels billing).
• For data export or any other request, email info@reddithunt.xyz — we’ll respond within 30 days.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

Retention

We keep your data while your account is active. After deletion, account records are removed within 30 days; encrypted backups roll off within 90 days. Billing records are kept for 7 years to meet Dutch tax-law requirements.

Contact

Privacy questions: info@reddithunt.xyz.