◆
SPYBENCH
LEGAL · 01

Privacy Policy

Last updated: May 12, 2026

1. Overview

SpyBench, operated by Mi Myst, LLC ("Mi Myst," "we," "us"), provides a competitive intelligence workbench. Mi Myst, LLC is the data controller responsible for personal data processed through SpyBench. This policy explains what we collect, why, our legal basis for processing, and how we keep it safe.

2. Information We Collect

  • Account data: name, email, hashed password, OAuth identifiers.
  • Forwarded emails: any messages you forward or auto-route to your private SpyBench ingestion alias.
  • Scraped public web content: opt-in pages, landing pages, and pricing pages of competitors you add.
  • Usage telemetry: feature interactions and error logs used to improve reliability.

3. Email Forwarding & Ingestion

When you forward a competitor email to your SpyBench address, the message body, headers, and metadata are stored encrypted at rest. We process the content with AI models to generate teardowns and patterns. We do not republish, share, or sell the content of your inbox.

4. How We Use Data

To provide the service, generate analyses, send you alerts, troubleshoot issues, and maintain security. We do not sell your data to third parties.

4a. Legal Basis for Processing (GDPR)

  • Contract performance — to create your account, deliver the service, and process your subscription.
  • Legitimate interests — to secure the service, prevent fraud and abuse, and improve product reliability.
  • Consent — for optional marketing communications and non-essential cookies, where required. You may withdraw consent at any time.
  • Legal obligation — to comply with tax, accounting, and other applicable laws.

5. Subprocessors

We share personal data with vetted subprocessors who help us operate the service, each bound by a data processing agreement. Categories include:

  • Paddle.com Market Ltd — our Merchant of Record. Paddle processes all payments, subscription billing, tax compliance, invoicing, and refund handling, and receives the personal data required to complete those transactions (name, email, billing address, payment method metadata).
  • Cloud hosting and database infrastructure providers.
  • Authentication and identity providers.
  • Transactional email delivery providers.
  • AI inference providers used to generate analyses from content you submit.

6. Security

Data is encrypted in transit (TLS) and at rest. Access is gated by row-level security so each user can only see their own intel.

7. Your Rights (GDPR / CCPA)

You may request access to, correction of, or deletion of your personal data at any time by emailing support@spybench.com. California residents have the right to know and the right to delete under the CCPA. EU/UK residents have rights of access, rectification, erasure, restriction, portability, and objection under the GDPR.

8. Retention

We retain account and intel data for as long as your account is active. Deleting your account removes your stored emails, scraped pages, and generated analyses within 30 days.

9. Contact

Questions? Reach us at support@spybench.com.