Privacy Policy

Rival Radar (“we”, “us”) watches web pages and business listings you tell us to watch, and tells you when something changes. This policy explains what personal data we collect to do that, why, who we share it with, and what your rights are. It applies to rivalradar.me and to your account with us. If anything here is unclear, email support@rivalradar.me and we'll explain it properly.

Who we are

Rival Radar is operated by PW App Development Limited, a company registered in England and Wales (company number 14108044), contactable at support@rivalradar.me. For the purposes of UK and EU data protection law, we are the “data controller” of the personal data described below.

What we collect

From you directly:

• Account details: name and email address, whether you sign up with a password or through Google.
• The competitors and pages you add to be watched, and any notes you write about them.
• Billing details, if you upgrade to a paid plan, handled directly by Stripe, our payment processor. We never see or store your full card number.
• Anything you send us directly: support emails, contact form messages, and feedback submitted through the app.

Automatically, as part of running the service:

• The content of pages we scrape on your behalf, and the history of changes we detect in them, so we can show you a before/after and notify you.
• Basic usage and error logs (e.g. when a scrape succeeds or fails, sign-in activity), used to keep the service reliable and secure.
• A small number of strictly necessary cookies that keep you signed in. See our Cookie Policy for the full list. We don't use analytics, advertising, or cross-site tracking cookies.

How we use it, and on what legal basis

• To provide the service (necessary to perform our contract with you): authentication, running your dashboard, watching the pages you've added, detecting changes, and generating a plain-English explanation of what changed.
• To run your account (contract): enforcing your plan's limits, processing payments, and sending service emails (confirmations, password resets, billing receipts).
• To notify you of changes (contract, based on your own notification settings): sending you email digests when a watched page changes, if you've left that switched on.
• To keep the service reliable and secure (our legitimate interest): fixing bugs, investigating abuse, and monitoring for errors.
• To respond to you (legitimate interest, or contract if you're already a customer): when you email support or use the contact form.

We do not sell your data, we do not use it to serve you ads, and we never share your email with anyone else for their own marketing. From time to time we may email existing users about a new feature or product update. You can opt out of these at any time in notification settings, or with the unsubscribe link on the email itself, separately from change alerts.

How AI is involved

When we detect a change on a page you're watching, we send the changed text (never your account details, and never the whole page) to Anthropic's AI models to generate a short, plain-English summary. This summary is a convenience feature, not a decision made about you. It doesn't affect your account, your plan, or anything with a legal or similarly significant effect on you, so it doesn't fall under the special rules on automated decision-making.

Who we share it with

We use a small number of service providers (“subprocessors”) to run Rival Radar. Each only receives what it needs to do its specific job, under its own data processing terms:

• Supabase, which hosts our database and handles authentication.
• Vercel, which hosts the application itself.
• ScraperAPI, which fetches the public pages you've asked us to watch.
• Anthropic, which generates the plain-English explanation of a detected change, from the changed text only.
• Brevo, which delivers our transactional emails (confirmations, change notifications).
• Stripe, which processes payments for paid plans and stores your billing details on our behalf.

We don't share your data with anyone else, sell it, or rent it, except where required by law (for example, a valid court order) or to protect our rights, users, or the public from harm.

Where your data is processed

Some of the providers above are based in, or process data in, the United States rather than the UK or EEA. Where that's the case, we rely on the provider's own approved safeguards for international transfers, such as the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, to make sure your data stays protected to UK/EU standards wherever it's handled.

Cookies

We use a small number of strictly necessary cookies to keep you signed in: nothing for analytics, advertising, or cross-site tracking, and no consent banner, since strictly necessary cookies don't require one. See our Cookie Policy for the full, named list.

How long we keep it

We keep your account data for as long as your account is active. If you delete your account, we delete your profile, watched competitors and pages, and change history immediately, other than what we're required to keep for legitimate business purposes (e.g. billing records, which Stripe and UK tax law require us to retain for longer). A copy may briefly persist in routine backups after that. These are retained for no longer than 30 days, in line with our hosting provider's backup policy, and are then automatically overwritten.

Keeping your data safe

We rely on our providers' security (encryption in transit and at rest, access controls, and infrastructure-level protections), restrict access to your data to what's needed to run the service, and never store full payment card details ourselves. No system is 100% secure, but if we ever become aware of a data breach affecting you, we'll notify you and the relevant regulator without undue delay, as required by law.

Your rights

If you're in the UK or EU, data protection law gives you the right to:

• Access the personal data we hold about you.
• Correct it if it's inaccurate or incomplete.
• Ask us to delete it (“the right to be forgotten”).
• Ask us to restrict or object to certain processing.
• Receive your data in a portable format, or have it transferred elsewhere.
• Withdraw consent at any time, where we rely on consent.

To exercise any of these, email support@rivalradar.me. We'll respond within one month. If you're unhappy with how we've handled your data, you also have the right to complain to your local data protection authority. In the UK, that's the Information Commissioner's Office (ICO).

Children

Rival Radar is a business tool, isn't directed at children, and our Terms require you to be at least 18 to create an account. We don't knowingly collect personal data from anyone under that age.

Changes to this policy

If we make material changes to this policy, we'll update the date above and, where appropriate, let you know directly (for example, by email).

Contact

Questions about this policy, or want to exercise any of your rights? Email support@rivalradar.me.