Privacy Policy for Rivalsee

1. Introduction

Welcome to Rivalsee ("we," "our," or "us"). This Privacy Policy explains how Second Coffee, LLC, doing business as Rivalsee, collects, uses, discloses, and protects your information when you use our website monitoring and analytics service at www.rivalsee.com (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

Information You Provide to Us

• Account Information: Email address, first name (optional), last name (optional), job title (optional), company name (optional), and how you found out about us (collected during registration)
• Website Information: URLs of websites you want to monitor
• Business Information: ICP (Ideal Customer Profile) descriptions and custom questions for analysis
• User-Generated Content: Any modifications you make to questions or company descriptions before AI analysis

Information Collected Automatically

• Usage Data: How you interact with our Service
• Cookies: We use cookies for authentication and to store user preferences
• Email Engagement: We track email opens and clicks for our marketing and analytics emails
• Analytics Data: We use Google Analytics to understand how users interact with our Service

Information from Third Parties

• Payment Information: Handled directly by Stripe, our payment processor
• Authentication Information: If you choose to log in via Google (or Outlook in the future)

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Authenticate your access to the Service via magic links or third-party authentication
• Analyze your websites' performance on AI-powered search engines through one-time scraping
• Send you analytics reports about your websites
• Send you marketing communications (with your consent)
• Conduct internal A/B testing to improve our Service
• Respond to your requests and provide customer support
• Comply with legal obligations

4. How We Share Your Information

We share your information in the following circumstances:

With Service Providers

• AI Services: We share your website content, questions, and descriptions with AI services (OpenAI, Google Gemini, Anthropic Claude, Perplexity, and Grok) to generate analyses
• Payment Processing: Stripe handles all payment information
• Email Services: Amazon SES for sending emails
• Infrastructure: Fly.io and AWS for hosting and data storage

Public Sharing

• Free Users: All analysis results are publicly accessible via a unique URL and may be indexed by search engines
• Paid Users: Results default to public but can be made private through account settings

Legal Requirements

We may disclose your information if required by law or in response to valid legal requests.

Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide you services.

• Account Data: Retained indefinitely while your account is active
• Analytics Data: Retained indefinitely but may be replaced when you regenerate analyses
• Deletion Requests: Upon request, we will delete your data within 30 days

To request deletion, please contact us at [email protected].

6. Your Rights and Choices

Account Information

You can update your account information at any time through your settings page.

Email Communications

• Marketing Emails: You can opt out of marketing emails using the unsubscribe link in any marketing email
• Analytics Emails: You can opt out of analytics emails separately through your account settings

Cookies

Most web browsers are set to accept cookies by default. You can usually modify your browser settings to decline cookies, but this may prevent you from using certain features of our Service.

Data Access and Portability

You may request access to the personal information we hold about you by contacting us at [email protected].

7. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Data is encrypted in transit
• We do not store passwords
• Access to personal information is restricted to authorized personnel
• We use secure magic link authentication

Data Security Incident Response

In the event of a data breach that may compromise your personal information, we will notify affected users via email within 72 hours of becoming aware of the breach.

8. International Data Transfers

Our Service is operated from the United States. If you are located outside the United States and choose to use our Service, please note that your information will be transferred to and processed in the United States.

9. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have collected personal information from a child under 13, we will promptly delete such information.

10. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

11. California Privacy Rights

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA), including the right to:

• Know what personal information we collect, use, disclose, and sell
• Request deletion of your personal information
• Opt-out of the sale of personal information (note: we do not sell personal information)
• Non-discrimination for exercising your privacy rights

To exercise these rights, contact us at [email protected].

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date at the top of this Privacy Policy
• Sending an email notification for material changes

You are responsible for reviewing this Privacy Policy periodically. Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Appendix: GDPR Information for European Users

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract: To provide our Service to you
• Legitimate Interests: To improve our Service and conduct marketing
• Consent: For marketing communications

Additional Rights

You have the right to:

• Access your personal data
• Rectify inaccurate personal data
• Request erasure ("right to be forgotten")
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent

To exercise these rights, please contact us at [email protected]. We will respond to your request within one month.