Rivale.io
Last updated: September 2026
What this covers
This policy explains what data Rivale.io collects, how we use it, and who we share it with. Rivale.io is operated by Rivale, based in Switzerland.
Questions? Email us.
What we collect
Account information
When you create an account, we collect your name and email address. We use this to manage your account and send you product notifications.
Payment information
Payments are processed by Stripe. We do not store your card number, expiry date, or CVV. Stripe handles all payment data directly. We store your subscription tier and billing status.
Usage data
We store your plugin, the competitors you track, your notification settings, and which features you use. This lets us run your notifications correctly and improve the product.
Cookies and browser storage
The app keeps you logged in with a token in your browser’s local storage. It sets no login cookie. The app’s hosting layer sets one short-lived security cookie that tells browsers apart from bots, and records aggregate visit statistics.
Inside the app, PostHog records how you use Rivale.io: the pages you open, the buttons you click, and recordings of your sessions with everything you type hidden. It stores a cookie and a browser-storage identifier to link those visits to your account.
The marketing site at rivale.io uses Google Analytics to count visits. Nothing runs until you accept it, and we remember your answer for a year so we do not ask again. We do not use advertising cookies.
What Rivale.io reads on your behalf
Everything Rivale.io shows you about a competitor comes from public sources that anyone can open, such as their WordPress.org listing and their own marketing pages. Our servers fetch that data. Those requests carry nothing about you or your account. We do not collect data about your customers, your plugin’s users, or your website visitors.
Who we share data with
Supabase
Database hosting, authentication, and backend infrastructure. Your account and usage data are stored in Supabase infrastructure.
Stripe
Payment processing. Your payment data goes directly to Stripe. We receive a customer ID and subscription status in return. Stripe’s own privacy policy governs payment data.
Loops.so
Email delivery for transactional notifications and product updates. Your email address, your name, and your plan and usage details (such as subscription status and how many competitors you track) are stored in Loops. You can unsubscribe from marketing emails at any time via the unsubscribe link in any email.
Slack
If you connect a Slack workspace, we send notifications to the webhook URL you provide. We store that URL in your account settings. Rivale sends only the notification content you have configured. Disconnecting Slack removes the webhook from your account immediately.
Google Analytics
Visit statistics for the marketing site at rivale.io. It runs only if you accept analytics in the cookie notice. Google’s own privacy policy governs that data.
PostHog
Product analytics for the app, hosted in the EU. PostHog receives your account ID, your email address, the pages you visit and the actions you take in the app, and session recordings with everything you type hidden. We use it to find where the product is unclear and fix it. PostHog’s own privacy policy governs that data.
Crawling and analysis services
Competitor marketing pages are fetched, and public competitor text such as reviews and changelogs is classified, through third-party services. They receive competitor URLs and public page content only. No account data or personal information is included.
WordPress.org
Public plugin API. We fetch competitor plugin data from WordPress.org public endpoints. No user data is sent to WordPress.org.
We do not sell your data. We do not share your data with advertisers.
Data retention
We keep your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days.
Your rights
Wherever you live, you can ask for a copy of your personal data, have it corrected or deleted, or restrict how we process it. Email legal@rivale.io. We respond within 30 days.
Security
Authentication, session handling, and data storage run on Supabase, encrypted in transit and at rest.
Changes to this policy
If we make material changes to this policy, we will notify customers by email before the changes take effect.
Questions: legal@rivale.io