UserConcern

Privacy Policy

Last updated: October 4, 2026

1. Introduction

Mitiga Group LLC ("we", "us", "our") operates UserConcern at userconcern.com. This Privacy Policy explains how we collect, use, and protect your personal data. We are committed to compliance with the EU General Data Protection Regulation (GDPR) and applicable US privacy laws.

2. Data We Collect

  • Account data: email address, name (if provided), authentication provider (Google or email/password)
  • Usage data: search queries, number of searches used, saved items
  • Payment data: handled entirely by Stripe — we do not store card details
  • Technical data: IP address, browser type, device info (via standard web logs)
  • Attribution data: the referring website and any campaign parameters (utm_source, utm_medium, utm_campaign) present when you first arrive, recorded once so we can tell which channels bring people to UserConcern

3. How We Use Your Data

  • To provide and improve the UserConcern service
  • To manage your account and subscription
  • To send transactional emails (account confirmation, password reset)
  • To analyze usage patterns and improve our AI models

4. Legal Basis for Processing (GDPR)

We process your data based on: contract performance (to deliver the service you signed up for), legitimate interests (service improvement, security), and consent (where explicitly given).

5. Data Retention

We retain your account data for as long as your account is active. Search history is retained for service functionality. You may request deletion of your data at any time.

6. Third-Party Services

We use the following third-party services:

  • Supabase (database and authentication)
  • Stripe (payment processing)
  • Anthropic (AI analysis of the sources we collect)
  • Google (OAuth authentication, YouTube API)
  • SerpAPI (retrieves public search results for your queries)
  • Perplexity (retrieves public AI answer signals for your queries)
  • Brevo (sends the weekly topic email, if you follow a topic)
  • Upstash (caching and usage limits)
  • Vercel (hosting and privacy-friendly, cookieless analytics)

Each provider has their own privacy policy and data processing terms.

7. How Your Data Is Shared

We do not sell your personal data and we do not share it for advertising. Data reaches the providers listed above only in these ways:

  • Automatically over encrypted HTTPS connections, when a provider is needed to deliver the service you asked for — for example your search text is sent to SerpAPI, Perplexity and Anthropic in order to produce a report
  • To Stripe, when you start or manage a subscription. Card details go directly to Stripe and never reach our servers
  • To Brevo, only if you follow a topic and so ask us to email you
  • To a legal or regulatory authority, if we are required by law to disclose it
  • To a buyer or successor, if the business is sold or merged, under the same commitments set out in this policy

8. How We Protect Your Data

  • All traffic to and from UserConcern is encrypted in transit with HTTPS/TLS
  • Data is stored with Supabase, encrypted at rest, with row-level security so one account cannot read another account's data
  • We never store card numbers. Payment details are held by Stripe, a PCI-DSS Level 1 provider
  • Passwords are hashed by our authentication provider and are never visible to us
  • Access to production systems is limited to the operator of the business and protected by multi-factor authentication
  • Secrets and API keys are held in environment configuration, never in the codebase

9. Your Rights (GDPR)

If you are an EU resident, you have the right to: access your personal data, correct inaccurate data, request deletion of your data, object to processing, and data portability. To exercise these rights, contact us at support@mitigagroup.com

10. Cookies

UserConcern uses essential cookies for authentication and session management. We do not use tracking or advertising cookies.

11. Data Transfers

Your data may be processed in the United States where our service providers operate. We ensure appropriate safeguards are in place for any international data transfers.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or a notice on the site.

13. Contact

For privacy-related questions or to exercise your rights:

Email: support@mitigagroup.com

Mitiga Group LLC, 30 N Gould St Ste N, Sheridan, WY 82801, United States

Phone: +1 (239) 251-8384