Privacy Policy

Last updated June 2026

What POI collects

When you install POI’s detection script on your site, we collect session-level signals from visitors to your site (browser fingerprint signals, request headers, and behavioral patterns) for the sole purpose of distinguishing automated scrapers from real users. We do not collect personal data beyond what is necessary to detect and fingerprint scraping activity.

Your account data

We store your account email, company name (if provided), and billing information needed to process payments through Paystack. We never store full payment card details — those are handled directly by Paystack.

Evidence and attack data

Data POI collects about suspected scrapers and bots (IP addresses, request patterns, watermark tokens) is retained for as long as your account is active, so it can be exported as evidence. You can request deletion of this data by closing your account.

Third parties

We use Supabase for database and authentication, Paystack for payment processing, Resend for transactional email, and Hubtel for SMS/WhatsApp alerts. Each processes only the data required to perform its function for your account.

Your rights

You can request a copy of your data or full account deletion at any time by emailing hello@poi.so. Account deletion removes your profile, apps, and all associated detection data.