Privacy

This page describes what Rivalr collects, why, and what you can do about it. It is written to be read, not to be survived.

Who is responsible

Rivalr is the data controller for the personal data described here: we decide why and how it is processed. Contact us at hello@rivalr.se.

Rivalr is operated by Tobias Rosén (trading as Rivalr), Sweden. Contact: hello@rivalr.se.

What we collect, and why

• Your account. Name, email address, login credentials and the workspace you belong to — to create your account and provide the service.
• What you ask us to watch. The competitors, products and markets you configure, and your own company profile — to provide the service.
• Publicly available information about those competitors. Pages, listings, reviews and public posts, together with the source of each one — to provide the service.
• How you use Rivalr. Pages visited, actions taken, IP address and device information — for security, fraud prevention and improving the product.
• How you arrived. Referrer and campaign parameters on first visit — to understand which channels work.
• Support messages. What you write to us — to help you.

Legal basis

• Contract — account data and workspace configuration, needed to provide the service.
• Legitimate interests — security, fraud prevention, product improvement and processing public competitor information.
• Consent — where we ask for it, for example optional emails; you can withdraw it at any time.
• Legal obligation — records we must keep by law.

What we do not collect

We do not buy personal data, we do not collect anything from behind a competitor's login, and we do not sell anything we hold.

Who we share it with

• Paddle.com, our Merchant of Record, for the sale of the product, subscription management, payments, tax compliance and invoicing. Paddle processes payment details under its own privacy notice.
• Service providers that host and run the platform (cloud hosting, database, email delivery, AI processing), bound by data processing terms.
• Professional advisers such as legal and accounting, where needed.
• Authorities, where the law requires it.

Within Rivalr, your data is visible to people you invite to your workspace and to the Rivalr staff who operate the platform — never to any other customer.

Where it lives

Workspace data is stored in our hosted Postgres database and isolated per workspace at the database level. Where a provider processes data outside the EU/EEA, we rely on safeguards such as the EU Standard Contractual Clauses or adequacy decisions.

Security

We use appropriate technical and organisational measures: encryption in transit and at rest, per-workspace isolation enforced on the server, role-based access controls, and audit logging of security events.

How long we keep it

For as long as your workspace exists. Delete your workspace and the data is deleted or anonymised, except records we must keep by law (such as invoices), which are deleted when that obligation ends.

Cookies

We use essential browser storage to keep you signed in and remember your preferences. We do not use advertising cookies.

Your rights

Under the GDPR you can request access to your data, correction, deletion, restriction, portability, object to processing, and withdraw consent. Write to hello@rivalr.se and we will respond within one month. You can also complain to the Swedish Authority for Privacy Protection (IMY).