Privacy Policy
Last Updated: March 2026 • Effective Immediately
Commitment to Data Minimization & Privacy
At Niche Monitor, we believe in collecting only the bare minimum personal data required to deliver our market research and demand validation tools. We do not sell your personal data, we do not engage in cross-context behavioral ad tracking, and we adhere strictly to the General Data Protection Regulation (GDPR), UK GDPR, and California Consumer Privacy Act (CCPA/CPRA).
1. Data Controller Identification
The data controller responsible for the processing of your personal data on this platform is:
Operator: Niche Monitor Team (Independent Software Venture / Sole Proprietorship (Pre-incorporation))
Physical Address: CY B 14, Tamale - Ghana
Contact & Privacy Email: contact@nichemonitor.site
2. Categories of Personal Data We Collect
Under the principle of data minimization (GDPR Art. 5(1)(c)), we collect only what is strictly necessary:
- Account Information: When you create an account, we collect your email address and encrypted authentication credentials. Providing a full name is completely optional.
- Validation & Session Research: Niche queries, market tree selections, and generated draft landing page copy created during your validation sessions.
- Lead Capture Submissions: If you or visitors submit an email address to a hosted smoke-test page or checkout waitlist, we store the submitted email address and optional name solely to send confirmation alerts and notify you of availability.
- Billing & Payment Data: All payments, subscriptions, and invoicing are handled directly by our Merchant of Record, Lemon Squeezy, LLC. We do not store or process your credit card numbers or banking credentials on our servers. We receive only transaction confirmations, subscription statuses, and license identifiers.
- Technical & Authentication Cookies: Essential session cookies used securely by Supabase Authentication to verify your identity between requests.
3. Legal Bases for Processing (GDPR Art. 6)
We process your personal data under the following lawful bases:
- Performance of a Contract (Art. 6(1)(b)): Delivering the validation workspace, hosting generated smoke-test pages, and providing user account access.
- Legitimate Interests (Art. 6(1)(f)): Maintaining platform security, preventing abuse or automated scraping attacks, and ensuring server uptime.
- Consent (Art. 6(1)(a)): Delivering early-access email notifications, waitlist alerts, or non-essential communications where you have explicitly opted in.
4. Third-Party Sub-Processors & Service Providers
We only share necessary data with trusted service providers who adhere to strict data protection standards and data processing agreements:
| Provider | Purpose | Location |
|---|---|---|
| Supabase, Inc. | Database hosting, encrypted user authentication, session tokens | United States / Global AWS |
| Lemon Squeezy, LLC | Merchant of Record, payment processing, sales tax & VAT collection | United States |
| Resend, Inc. | Transactional email delivery (welcome emails, lead alerts, dossiers) | United States |
| Anthropic & OpenRouter | AI text generation for idea structuring (no user PII sent in prompts) | United States |
| SerpApi / Google Custom Search | Public search query execution for Reddit discussion discovery | United States |
5. Data Retention & Erasure
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by statutory retention laws.
If you delete your account or submit a deletion request to contact@nichemonitor.site, your account profile, personal identification, and associated sessions will be permanently purged within 30 days, except where retention is required for legal, tax, or fraud prevention obligations.
6. Your Rights Under GDPR and Global Privacy Laws
Depending on your jurisdiction, you possess the following enforceable rights regarding your personal data:
- Right of Access: Obtain confirmation of whether your data is being processed and receive a copy of your personal data.
- Right to Rectification: Request correction of inaccurate or incomplete personal information.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data when it is no longer required.
- Right to Data Portability: Receive your data in a structured, commonly used, and machine-readable format.
- Right to Object & Restrict Processing: Object to processing based on legitimate interests or request restriction of processing.
- Right to Withdraw Consent: Withdraw consent at any time where processing was based on consent, without affecting past lawful processing.
To exercise any of these rights, contact us directly at contact@nichemonitor.site. We respond to verified data requests within 30 days at zero charge.
7. California Consumer Privacy Notice (CCPA / CPRA)
For California residents, we provide the following additional statutory disclosures:
- We do not sell your personal information.
- We do not share your personal information for cross-context behavioral advertising.
- We do not collect or process sensitive personal information for inferring characteristics.
- You have the right to non-discrimination for exercising your privacy rights under California law.
8. Security Measures
We implement industry-standard technical and organizational security controls, including TLS 1.3 encryption in transit, encrypted storage at rest via Supabase, role-based database row-level security (RLS), and least-privilege API access tokens.
9. Contact & Inquiries
If you have any questions, concerns, or requests regarding this Privacy Policy, please reach out to: