1. What we collect
Information you provide
When you sign up and use rivaltea, we collect:
- Your email address (used as your account login and delivery address)
- Your industry or market category
- The names of competitors you want tracked (up to five at onboarding, adjustable anytime)
- Any feedback you submit through the feedback form
We do not collect your name, phone number, physical address, or any demographic information.
Payment information
Payment is processed by a third-party payment processor. Your credit card number, expiration date, and billing details are handled entirely by the processor and never touch our servers. We receive and store only a customer ID and subscription status.
Information we generate
As part of the service, we collect and store:
- Your brief history (the content of each weekly brief delivered to you)
- Email engagement data (open and click events, provided by our email service)
- Competitor data collected from public sources (described below)
2. Public data collection
To generate your brief, rivaltea collects information from publicly available sources about the competitors you named and competitors our system discovers. These sources include:
- Company websites (homepages, pricing pages, about pages, changelogs)
- Software review platforms
- Public job boards
- Press coverage and blog posts
- Community discussions and forums
- Funding and company databases
- Product launch platforms
All data is collected from publicly accessible pages. We do not access authenticated, gated, or private content. We do not scrape social media profiles of individuals. The data collected relates to companies and their public business activities, not individuals.
3. How we use your data
- Your email address: to deliver your brief, send account notifications, and communicate service updates.
- Your industry and competitor list: to personalize your brief content and run the competitor discovery engine.
- Your brief history: to prevent duplicate items across weeks.
- Email engagement data: to improve brief quality and delivery timing.
- Your feedback: to improve the service.
We do not sell, rent, or share your personal information with other subscribers, advertisers, or data brokers. Your competitor list is never visible to other subscribers.
4. Third-party services
We use third-party services for payment processing, email delivery, data storage, and application hosting. These services receive only the data necessary to perform their function and are obligated not to use it for other purposes.
rivaltea uses AI to collect, analyze, and write the content in your brief. Your industry, competitor names, and the publicly collected data described above are processed through our AI provider to generate your brief. Your data is not used to train AI models.
5. Data storage and retention
Your account data and brief history are stored in a managed database hosted in the United States. Competitor data snapshots are stored separately in a US-based cloud storage service.
Retention periods:
- Account data: retained while your subscription is active. Deleted within a reasonable period after cancellation.
- Brief history: retained while your subscription is active. Deleted within a reasonable period after cancellation.
- Competitor data snapshots: active snapshots retained for 90 days. Older snapshots are moved to cold storage and deleted after 2 years.
- Scrape logs and signal records: retained for 90 days for deduplication, then deleted.
- Feedback: retained indefinitely unless you request deletion.
6. Data security
All data is transmitted over HTTPS. Database access requires authentication and is restricted to the application. Cloud storage access uses credentials with minimal permissions. API keys and secrets are stored as environment variables and never committed to source code.
We do not store your password in plain text. Passwords are hashed using industry-standard algorithms.
7. Your rights
You can:
- View and update your industry and competitor settings at any time through your account
- Request deletion of your account and all associated data by emailing hello@rivaltea.com.
- Cancel your subscription at any time from your account settings
8. Cookies and tracking
The rivaltea website uses minimal cookies required for authentication and session management. We do not use advertising cookies or trackers. If we add website analytics in the future, we will use a privacy-friendly service (such as Plausible or Fathom) that does not track individuals or use cookies.
Email open and click tracking is provided by our email delivery service via tracking pixels and link wrapping. This data is used in aggregate to measure brief engagement and improve the service. If you prefer not to be tracked, most email clients allow you to disable remote image loading.
9. Children's privacy
rivaltea is a business product and is not intended for use by anyone under 18 years of age. We do not knowingly collect information from minors.
10. California residents
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, email hello@rivaltea.com.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
12. Contact
Questions about this policy or your data? Email hello@rivaltea.com.