Privacy Policy

1. What We Collect

• Account information: Email address (used for sign-in and digest delivery).
• Business details: Business name, address, service area, phone number, and business type, provided during onboarding or gathered from publicly available sources.
• Payment information: Processed and stored exclusively by our PCI-compliant payment processor. We never see or store your full card number.
• Communications data: If you communicate with us by phone, email, or SMS, we collect the contents of those communications, your phone number, and related metadata (such as delivery status of messages we send you).
• Technical and log data: IP address, browser type, and server logs of requests to the Service, used for security, rate limiting, and abuse prevention. We also count visits to report links we send to prospective customers.
• Prospective customer information: If we contact your business about the Service, we may process publicly available business contact information (such as your business name, phone number, and address from public listings) to make that contact and, with your consent, to send you a requested report link; where you consent to phone or text contact, we record the date, time, and IP address of that consent as evidence, and we may store summaries of phone conversations with us.

2. What We Do NOT Do

• We do not access your private business accounts or login credentials on any review platform.
• We do not collect social media passwords or private account data.
• We do not track your browsing activity outside of rivlhq.com.
• We do not sell, rent, or trade your personal information.
• We do not share your personal information with third parties for their own advertising or marketing purposes.

3. How We Use Your Data

• Identify competitors in your service area and monitor their publicly available reviews
• Generate and deliver digests, summaries, reports, and report links you request
• Send SMS messages you have consented to receive (see Section 4)
• Monitor your own business reviews and notify you of new activity
• Process billing and manage your subscription
• Improve the Service using aggregate, anonymized usage patterns
• Communicate account-related updates and respond to support requests
• Comply with legal obligations and protect against fraud and abuse

4. SMS Communications

With your consent, we send SMS messages, which may include: (a) a one-time link to a market report you requested during a phone conversation with us, and (b) for subscribers who opt in, market alert texts.

• Consent may be given verbally during a phone call with us or through the Service. Consent is not a condition of any purchase.
• Message frequency varies; for requested report links, you will typically receive a single message. Message and data rates may apply.
• Reply STOP at any time to opt out. Reply HELP for assistance or contact support@rivlhq.com.
• Mobile phone numbers, opt-in status, and SMS consent data will not be shared with or sold to third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third parties except our SMS delivery provider, solely to enable message delivery.

5. Third-Party Service Providers

We use a small number of third-party service providers to operate the Service. Each processes only the minimum personal data required for its function, on our behalf, under contractual confidentiality, and is prohibited from using your data for its own purposes. The categories of providers that process personal data are:

Providers that process only publicly available business information (and no personal data of our users) are not listed here, as they do not receive personal data. Each provider is governed by its own privacy policy. Information about specific providers is available on request at support@rivlhq.com where required by applicable law.

6. Cookies

RivL uses a single strictly necessary session cookie to keep you signed in. We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

7. Data Retention

• Account data: Retained while your account is active; deleted promptly when you delete your account, and in any event within 30 days.
• Communications and SMS consent records: Retained as needed to document consent and comply with telecommunications requirements.
• Review data: Competitor review data is retained for the duration of your subscription.
• Digests and reports: Stored for 12 months, then automatically purged.
• Payment records: Retained by our payment processor per its data retention policy.
• Anonymized aggregate data: May be retained indefinitely for Service improvement.

8. Data Security

We use industry-standard security measures including encrypted connections (TLS), secure authentication (magic links; no passwords stored), and access controls on our infrastructure. No system is perfectly secure, but we take reasonable steps to protect your data. If a data breach affects your personal information, we will notify you in accordance with applicable law.

9. Your Rights

Depending on your location, you may have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Update inaccurate or incomplete personal data
• Deletion: Request that we delete your personal data
• Portability: Receive your data in a structured, machine-readable format
• Opt out: Unsubscribe from marketing emails or SMS at any time

To exercise any of these rights, contact support@rivlhq.com. We will respond within 30 days. We will not discriminate against you for exercising your rights.

10. California Residents (CCPA/CPRA)

If you are a California resident, you have the right to: (a) know what personal information we collect and how it is used and shared; (b) request deletion or correction of your personal information; and (c) opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined under California law. To submit a request, contact support@rivlhq.com.

11. Washington Residents

We comply with applicable Washington State privacy laws. We do not collect consumer health data as defined under the Washington My Health My Data Act.

12. EU/EEA and UK Residents (GDPR)

If you are located in the EU, EEA, or UK, our legal bases for processing are contractual necessity (to provide the Service), consent (for SMS and marketing communications), legitimate interest (to improve and secure the Service and to contact businesses about services relevant to them), and legal obligation. You may withdraw consent, request restriction of processing, or object to processing at any time by contacting support@rivlhq.com, and you have the right to lodge a complaint with your local data protection authority.

13. Account Deletion

You can delete your account at any time via account settings or by contacting support@rivlhq.com. Upon deletion, we remove your personal data and associated review data within 30 days, except records we are required to retain for legal, billing, or consent-documentation purposes and security logs retained for a limited period for fraud and abuse prevention. Anonymized aggregate data may be retained indefinitely.

14. Children's Privacy

The Service is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us personal data, contact us so we can delete it.

15. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or through the Service at least 30 days before they take effect. The "Last updated" date reflects the most recent revision. Continued use after changes take effect constitutes acceptance.

16. Contact

Questions about your privacy? Reach us at support@rivlhq.com.