Privacy Policy

Effective Date: October 8, 2025
Entity: Terrestrial, LLC d/b/a Rivaly (“Rivaly,” “we,” “us,” or “our”)
Address: 155 Garfield Pl, #2, Brooklyn, NY 11215, USA
Contact: hello@rivaly.io

1. Overview

Rivaly is a competitive-intelligence platform that monitors publicly available company data and provides analytics and AI-generated insights.

This Privacy Policy explains how we collect, use, store, and share information when you visit rivaly.io, create an account, or use our products and services (collectively, the “Service”).

By using the Service, you agree to this Policy. If you do not agree, please discontinue use.

2. Information We Collect

a. Information you provide directly

• Account details such as name, email, organization, and password.
• Billing details such as company name, billing address, and subscription plan (processed securely by Stripe).
• User content and preferences, including competitor names, tracked sites, and settings you configure within Rivaly.
• Communications you send us (e.g., feedback, support requests, or marketing opt-ins).

b. Information collected automatically

• Usage data: pages viewed, links clicked, time spent, referring URLs, and device/browser type.
• Cookies and local storage: to remember sessions, preferences, and authentication.
• Analytics: we use Google Analytics (with IP anonymization enabled where possible) to understand aggregate traffic and usage patterns.
• Event tracking: we may use session and event analytics tools to improve user experience and performance.

c. Information from third-party services

If you connect third-party accounts or integrations (e.g., payment provider, email, or analytics tools), those services may share limited data with us as authorized by you.

3. How We Use Information

We use collected information to:

• Provide, operate, and maintain the Service.
• Process payments, subscriptions, and renewals.
• Send transactional emails (e.g., receipts, account notices).
• Send optional marketing or product updates (you can unsubscribe anytime).
• Monitor, analyze, and improve Service performance.
• Personalize dashboards, alerts, and recommendations.
• Detect, prevent, and address fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our Terms of Service.

4. AI-Generated Insights and Data Processing

Rivaly uses automated systems and third-party AI APIs (such as OpenAI) to analyze public information and user-provided competitor data to generate insights, summaries, and alerts.

• Inputs: may include public company data and competitor lists or notes you add.
• Outputs: AI-generated text and analytics displayed within your account.
• Storage: we store outputs and related metadata to deliver, update, and improve the Service.
• Training: we do not use your data or prompts to train external AI models.
• Accuracy: AI content may contain errors or outdated information. You should independently verify any insights before relying on them.

5. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA), UK, or Switzerland, we rely on these legal bases:

• Performance of a contract (to provide the Service).
• Legitimate interests (to improve and secure the Service).
• Legal obligation (to comply with applicable law).
• Consent (for analytics, marketing, or cookies where required).

6. How We Share Information

We do not sell personal data. We may share limited information as follows:

All vendors are bound by data-processing and confidentiality obligations.

7. Cookies and Tracking

Rivaly uses cookies and local storage for:

• Authentication and session management
• User preferences (e.g., language, theme)
• Analytics and performance

You can adjust cookie settings in your browser. A cookie banner for EU/UK users may be introduced when analytics tracking becomes active.

8. Data Retention

• Account data is retained while your account is active.
• Upon account closure, we delete personal data or anonymize it within a reasonable period (typically up to 120 days) except where law requires longer retention (e.g., billing records).
• Backups are maintained securely and deleted on a rolling basis within approximately 120 days.

9. Security

We use industry-standard administrative, technical, and organizational measures to protect information against loss, misuse, and unauthorized access. Examples include encryption in transit (TLS), secure cloud hosting, and limited employee access.

While we strive to protect your data, no system is completely secure, and we cannot guarantee absolute security.

10. Your Rights

a. Under GDPR/UK GDPR

If you are in the EEA or UK, you have the right to:

• Access a copy of your personal data.
• Request correction or deletion (“right to be forgotten”).
• Object to or restrict certain processing.
• Withdraw consent (where applicable).
• Request data portability.

To exercise these rights, email hello@rivaly.io.

You also have the right to lodge a complaint with your local supervisory authority.

b. Under CCPA/CPRA (California)

California residents have the right to:

• Request disclosure of the categories of personal data we collect.
• Request deletion of personal data (subject to legal exceptions).
• Opt out of “sale” or “sharing” of data (Rivaly does not sell data).
• Non-discrimination for exercising privacy rights.

Requests can be made to hello@rivaly.io.

11. International Data Transfers

We process data primarily in the United States. By using the Service, you consent to transfer of your data to the U.S. and other countries that may have different data-protection laws. We apply appropriate safeguards, including Standard Contractual Clauses where applicable.

12. Marketing Communications

You may receive marketing or product update emails if you opt in. You can unsubscribe at any time by clicking “unsubscribe” in the email or contacting hello@rivaly.io. Transactional and service-related emails are not affected.

13. Children’s Privacy

Rivaly is not directed to individuals under 18. We do not knowingly collect data from minors. If you believe we have inadvertently collected such information, please contact us to delete it.

14. Data Deletion and Account Closure

You may request deletion of your account and associated data by emailing hello@rivaly.io. We will verify your identity before completing the request and confirm once deletion is processed.

15. Changes to This Policy

We may update this Privacy Policy from time to time.

• If changes are material, we will notify you by email or in-app notice before they take effect.
• The “Effective Date” above shows when it was last updated.

Your continued use of the Service after any update constitutes acceptance of the revised Policy.

16. Contact Us

If you have questions or requests regarding this Policy or our data practices, please contact:

Terrestrial, LLC d/b/a Rivaly
155 Garfield Pl, #2, Brooklyn, NY 11215
Email: hello@rivaly.io