Privacy Policy

1. What We Collect

When you use RivL, we collect the following information:

• Account information: Email address (used for sign-in and digest delivery)
• Business details: Business name, address, service area, and business type (provided during onboarding)
• Payment information: Processed and stored exclusively by Stripe — we never see or store your card number
• Usage data: Pages visited, features used, and digest open rates to improve the Service

2. What We Do NOT Collect

• We do not read or access your own business's reviews
• We do not collect social media passwords or private account data
• We do not track your browsing activity outside of rivl.app
• We do not sell, rent, or trade your personal information to third parties

3. How We Use Your Data

• Identify competitors in your service area and monitor their public reviews
• Generate and deliver daily digests, weekly summaries, and monthly reports
• Send SMS alerts for significant market changes (Pro plan, with your consent)
• Process billing and manage your subscription
• Improve the Service based on aggregate usage patterns
• Communicate account-related updates and support responses

4. Third-Party Services

RivL uses the following third-party services to operate. Each processes only the minimum data required for its function:

5. Cookies

RivL uses a single session cookie (better-auth.session_token) to keep you signed in. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. No cookie banner is required because we only use strictly necessary cookies.

6. Data Retention

• Account data: Retained while your account is active and for 30 days after deletion
• Review data: Competitor review data is retained for the duration of your subscription
• Digests and reports: Stored for 12 months, then automatically purged
• Payment records: Retained by Stripe per their data retention policy

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Update inaccurate or incomplete personal data
• Deletion: Request that we delete your personal data
• Portability: Receive your data in a structured, machine-readable format
• Opt-out: Unsubscribe from marketing emails at any time

California residents (CCPA): You have the right to know what personal information we collect, request its deletion, and opt out of its sale. We do not sell personal information.

EU/EEA residents (GDPR): Our legal basis for processing is contractual necessity (to provide the Service) and legitimate interest (to improve it). You may lodge a complaint with your local data protection authority.

8. Account Deletion

You can delete your account at any time by contacting support@rivl.app. Upon deletion, we will remove all your personal data and associated review data within 30 days. Anonymized, aggregate data (e.g., total users, average digest open rates) may be retained indefinitely.

9. Data Security

We use industry-standard security measures including encrypted connections (TLS), secure authentication (magic links — no passwords stored), and access controls on our database infrastructure. While no system is perfectly secure, we take reasonable steps to protect your data.

10. Children's Privacy

RivL is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email at least 30 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact

Questions about your privacy? Reach us at support@rivl.app.