Privacy Policy
Last updated: April 2026
1. Who we are
RivalTracker Ltd is a company registered in England and Wales. We operate the RivalTracker service at rivaltracker.io. For data protection purposes, we are the data controller. Contact us at privacy@rivaltracker.io.
2. What data we collect
We collect: your name and email address when you create an account; your business name, type and address entered during onboarding; competitor names and URLs you add to your account; usage data such as pages visited and features used; payment information processed securely by Stripe (we never store card details).
3. How we use your data
We use your data to: provide the RivalTracker service including competitor monitoring and report generation; send your weekly Monday morning email digest; process your subscription payments; improve our product and fix bugs; contact you about important account or service changes.
4. Competitor data we scrape
We scrape publicly available data about the businesses you add as competitors — including Google ratings, reviews, TripAdvisor ratings, and website content. This data is processed to generate your weekly reports and is not shared with third parties.
5. Legal basis for processing
We process your personal data under the following legal bases: contract performance (to deliver the service you signed up for); legitimate interests (to improve our service and prevent fraud); consent (for marketing communications, which you can withdraw at any time).
6. Data sharing
We do not sell your personal data. We share data only with trusted service providers who help us operate RivalTracker: Supabase (database hosting), Anthropic (AI report generation — no personal data shared, only competitor data), Resend (email delivery), Stripe (payment processing). All providers are bound by data processing agreements.
7. Data retention
We retain your account data for as long as your account is active. If you cancel, we retain data for 90 days before deletion. Competitor snapshots and change history are retained for 12 months. You can request earlier deletion at any time.
8. Your rights
Under UK GDPR, you have the right to: access your personal data; correct inaccurate data; request deletion of your data; object to processing; data portability. To exercise any of these rights, contact us at privacy@rivaltracker.io. You also have the right to lodge a complaint with the ICO (ico.org.uk).
9. Cookies
We use essential cookies to keep you logged in and remember your preferences. We do not use advertising or tracking cookies. See our Cookie Policy for full details.
10. Changes to this policy
We may update this policy from time to time. We'll notify you by email of any material changes. This policy was last updated in April 2026.