RivalWatch (“we”, “us”) watches the public web pages you choose and tells you when something real changes. This policy explains what personal data we collect when you use tryrivalwatch.com, what we do with it, and who else handles it.
1. What we collect
- Account details: your name and email address, and your password, which is stored by our authentication provider in hashed form (we cannot read it). If you sign in with Google, we receive your name and email address from Google.
- Workspace details:your organisation’s name, its members and their roles, and invitations you create.
- What you track: the competitor names and page addresses you add, a stored copy of each public page we check, and the insights we generate from it. We only fetch publicly accessible pages.
- Delivery settings: if you connect Slack, the incoming-webhook address you provide. It is stored encrypted and used only to post your alerts and digests.
- Billing: payments are handled by Stripe. We receive and store your Stripe customer and subscription identifiers and your plan, never your card number.
- Technical data: such as IP address, browser type and the pages you request, held in server logs and sign-in session records for security and to run the service.
2. How we use it
- To provide the service: run your checks, generate insights, and deliver them by dashboard, Slack and email.
- To email you about your account, for example verification codes and password resets.
- To take payment and manage your plan.
- To keep the service secure, prevent abuse and fix problems.
- To reply to you when you contact us.
We do not sell your personal data and we do not show advertising. We do not use your account data to train AI models.
3. AI processing
To write insights, we send the text of the public pages you track, and claims extracted from them, to Anthropic’s Claude models through its API. We do not send your name, email address, payment details or other account data to the AI provider.
4. Who else handles your data
We use these service providers to run RivalWatch:
- Neon: database and sign-in (hosted in Frankfurt, Germany).
- Vercel: hosts the website and application.
- Hetzner: servers (in Falkenstein, Germany) that run the page checks and insight pipeline.
- Cloudflare: DNS, network protection and page-performance measurement.
- Stripe: payment processing.
- Resend: sending account emails such as verification codes.
- Anthropic: AI processing of public page text (section 3).
- Slack: delivery of alerts to the workspace you connect.
- Google: only if you choose to sign in with Google.
Some of these providers process data outside the UK and the European Economic Area, including in the United States. Where that happens, we rely on the safeguards the provider offers, such as standard contractual clauses.
5. Cookies
We use only essential cookies: one to keep you signed in securely, and a short-lived one used when you accept a team invitation. We do not use advertising or tracking cookies.
6. Security and retention
Traffic to the site is encrypted, and Slack webhook addresses are encrypted in our database. We keep your data while your account is active. If you ask us to delete your account, we delete your workspace data, including stored page copies and insights, apart from anything we must keep for legal, tax or fraud-prevention reasons (for example, billing records held by Stripe).
7. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to our use of your personal data, or to receive a copy of it. Email us and we will respond.
8. Changes
We may update this policy as the product changes. The date at the top shows when it last changed.
9. Contact
For privacy questions or data requests, email [email protected].