Legal

Privacy Policy

Last updated: 11th March 2026

RivallyAI ("we", "us", or "our") operates rivallyai.com. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it. By using RivallyAI, you agree to the practices described here.

1. Information We Collect

We collect the following categories of information:

• Account information — your email address and password (hashed) when you create an account.
• Subscription data — billing status, plan tier, and subscription identifiers managed via Dodo Payments. We do not store full card numbers.
• Usage data — competitor URLs you add, scan results, and activity within the dashboard. We process publicly available information from the URLs you provide to generate your reports.
• Technical data — IP address, browser type, and access timestamps for security and debugging purposes.

2. How We Use Your Information

• To provide and maintain the RivallyAI service.
• To process payments and manage your subscription.
• To send transactional emails (e.g. scan alerts, billing receipts).
• To detect and prevent fraud or abuse.
• To improve and debug the platform.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Third-Party Services

We use a limited set of trusted third-party services to operate RivallyAI:

• Supabase — Data storgae and authentication is managed by Supabase.
• Dodo Payments — Payment processing is handled by Dodo Payments, our Merchant of Record. Dodo Payments handles your payment information securely and is responsible for tax compliance and regional regulations.
• Resend — We use Resend to send email alerts, weekly digest and other important notifications (like changes in pricing, new features, new plans and updated policies).

Each of these services operates under their own privacy policies and security standards.

4. Data Retention

We retain your account data for as long as your account is active. If you delete your account, your personal data is deleted from our active databases within 30 days of account closure, and we cancel your subscription on the spot.

Scan results and competitor data associated with your account are deleted upon account deletion.

5. Cookies and Local Storage

RivallyAI uses browser local storage to maintain your login session and store temporary scan state. We do not use third-party advertising cookies or tracking pixels.

6. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Object to or restrict certain processing of your data.
• Export your data in a portable format.

To exercise any of these rights, contact us at support@rivallyai.com.

7. Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), hashed passwords, and access controls. No system is completely secure, and we cannot guarantee absolute security.

8. Children's Privacy

RivallyAI is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by updating the "Last updated" date at the top of this page. Continued use of RivallyAI after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy, please reach out via X (Twitter) or email support@rivallyai.com.