Privacy Policy

1. Who we are

Toptic is operated by the company below, which is the data controller responsible for personal information processed through toptic.co and the Toptic service.

Email: toptic@incrmn.tl

2. Information we collect

We may collect the following information:

Account information

• Your email address
• The profile name you provide, which may be your first name, nickname or another name
• Your internal account identifier
• Authentication and account-security information

Authentication is provided through Supabase. We do not have access to your plain-text password.

Research and project information

• Keywords and search terms
• Competitor names, domains and URLs
• Countries, languages and other search settings
• Saved projects, lists, searches and results
• Any other information you choose to save within Toptic

Search terms and project information may reveal information about your business plans or research. You should not enter sensitive personal information or confidential information you are not authorised to process.

Subscription and transaction information

Polar acts as the merchant of record for Toptic purchases.

We may receive information such as:

• Your Polar customer or order identifier
• Your selected plan
• Subscription and renewal status
• Token purchases and balances
• Payment success or failure
• Refund and cancellation status
• Billing country, currency and limited invoice information

Polar and its payment processors handle full payment-card details. Toptic does not receive or store your full card number.

Technical and usage information

We may collect:

• IP address
• Browser, operating system and device type
• Pages and features used
• Dates, times and duration of activity
• Referring pages or campaign information
• Errors, failed requests and technical logs
• Internal account identifiers associated with product activity

Communications

If you contact us, we collect the information contained in your email or support request.

We also record your email preferences, consent choices and unsubscribe requests.

3. How we use your information

We use personal information for the following purposes:

You must provide an email address and authentication information to create an account. Search information is required to perform the searches you request.

Providing a profile name and agreeing to marketing communications are optional.

4. Emails we may send

Essential service emails

We may send emails necessary to operate Toptic, including:

• Authentication and password-reset emails
• Purchase, payment and subscription information
• Failed-payment and renewal notices
• Security alerts
• Significant outages or service interruptions
• Important changes to Toptic or these legal terms
• Fixes or technical changes that materially affect your account or use of the service
• Responses to support requests

These are not marketing messages and may be sent while you have an account or active relationship with Toptic.

We will keep essential service emails factual and will not use them to disguise promotional material.

Marketing emails

With your permission, or where otherwise permitted by law, we may send:

• Product news and general updates
• New-feature announcements
• Tips and examples for using Toptic
• Special offers or discounts
• Surveys or research requests
• Reminders about a plan or purchase you started but did not complete

We may use account or checkout activity to make these communications relevant to you, but only where you are eligible to receive marketing.

You can unsubscribe at any time using the unsubscribe method in the email or by contacting toptic@incrmn.tl.

Unsubscribing from marketing will not stop essential account, security, payment or service messages.

We may retain a limited suppression record after you unsubscribe so that we do not accidentally send you further marketing.

5. Cookies and analytics

Essential technologies

Toptic uses essential cookies or similar technologies for:

• Authentication
• Account security
• Maintaining sessions
• Remembering necessary service settings
• Preventing fraud and misuse

These are required for Toptic to function.

Vercel Web Analytics

We use Vercel Web Analytics to understand aggregated website traffic, such as:

• Pages viewed
• Referring websites
• Approximate country
• Browser, operating system and device type

Vercel Web Analytics does not use cookies and does not provide us with a persistent, personally identifiable visitor profile.

PostHog and analytics choices

With your consent, we use PostHog for:

• Product analytics
• Feature usage
• Funnels and conversion measurement
• Error tracking
• Session recordings of pages you visit, including signed-in app screens

PostHog receives an internal account identifier rather than your name or email address.

Heatmaps, feature flags and experiments remain disabled. Session recordings begin only after you allow analytics.

PostHog analytics and error tracking will not begin until you allow analytics through our consent controls. You can change your choice at any time using the Analytics settings control available on every page or the Privacy section of your account settings.

Rejecting analytics will not prevent you from using Toptic’s core functions.

6. How we share information

We do not sell personal information.

We may share information with the following providers:

Market-data providers may receive:

• Search terms or keywords
• Domains and URLs
• Requested country and language
• Other search parameters

They do not receive your Toptic profile name, email address or internal account identifier from us.

We may also disclose information:

• When required by law, court order or a regulator
• To investigate fraud, misuse or security incidents
• To professional advisers where reasonably necessary
• In connection with a sale, reorganisation, merger, acquisition or transfer of the Toptic business

We do not use private searches or projects to train public AI models.

We may use aggregated or anonymised information to understand usage, improve Toptic and produce general statistics, provided it cannot reasonably identify you or reveal your private research.

7. International transfers

Some providers process information outside the United Kingdom, including in the United States and European Economic Area.

Where required, we rely on appropriate safeguards such as:

• UK adequacy regulations
• The UK–US Data Bridge where applicable
• The UK International Data Transfer Agreement
• The UK Addendum to approved standard contractual clauses
• Other legally recognised transfer safeguards

You may contact us for further information about the safeguards used for a particular transfer.

8. How long we keep information

We generally retain information as follows:

• Account and saved project information: until you delete your account
• Deleted account information in active systems: normally removed within 30 days
• Backup copies: normally removed or overwritten within 90 days
• Cached search and market data: generally up to 30 days, unless saved as part of a project
• Security and technical logs: up to 12 months
• Analytics information: up to 24 months
• Support correspondence: normally up to 24 months after the issue is resolved
• Marketing preferences and consent records: while relevant to our marketing relationship
• Unsubscribe records: for as long as reasonably necessary to honour the unsubscribe request
• Payment, tax and accounting records: for the period required by applicable law

We may retain information for longer where necessary to resolve a dispute, establish legal rights, prevent fraud or comply with law.

Aggregated information that no longer identifies anyone may be retained indefinitely.

9. Your rights

Depending on where you live and the circumstances, you may have the right to:

• Request a copy of your personal information
• Correct inaccurate or incomplete information
• Ask us to delete information
• Restrict how information is used
• Object to particular processing
• Receive certain information in a portable format
• Withdraw consent at any time
• Object to direct marketing

You have an unconditional right to object to the use of your personal information for direct marketing.

To exercise a right, email toptic@incrmn.tl. We may ask for information needed to verify your identity.

Where UK data-protection law applies, we will normally respond within one month.

You may also complain to the UK Information Commissioner’s Office or, where applicable, your local data-protection authority.

10. Automated decisions

Toptic does not use personal information to make solely automated decisions that produce legal or similarly significant effects about you.

The research data and estimates generated by Toptic are tools for you to interpret and do not constitute decisions about you.

11. Children

Toptic is not designed or marketed for children.

We do not knowingly collect personal information from children under 16. If you believe a child has provided information to Toptic, contact us so that we can investigate and delete it where appropriate.

12. Security

We use reasonable technical and organisational measures intended to protect personal information, including access controls, authenticated accounts and reputable infrastructure providers.

However, no online service or storage system can be guaranteed to be completely secure.

You are responsible for keeping your account credentials secure and notifying us if you suspect unauthorised access.

13. Changes to this policy

We may update this Privacy Policy when:

• Toptic changes
• We add or replace providers
• We introduce new analytics or marketing activities
• Legal requirements change
• The operator of Toptic changes

The latest version will be published on toptic.co with an updated date.

We will provide additional notice where a change materially affects how we use personal information.

If Toptic is transferred to another operator, personal information may be transferred as part of that change. We will update this policy and provide notice where required.

14. Contact us

For privacy questions, rights requests or complaints, email toptic@incrmn.tl.