Privacy Policy

What this covers

This policy describes how RivalSweep ("we", "us") handles data when you use our competitor-monitoring service at rivalsweep.com. It applies to workspace owners and members we approve during our managed beta.

Data we collect

• Account data: name, email address, and a hashed password (or your Google account identifier if you sign in with Google).
• Workspace data: the competitor URLs and pages you choose to monitor, and any keywords you track.
• Evidence data: normalized text snapshots and diffs of the public pages you configure, plus AI-generated classifications and summaries of what changed.
• Billing data: your subscription plan and status. Payment details are handled entirely by Paddle (our payments provider and merchant of record) — we never see or store your card details.
• Usage data: basic request logs (IP address, timestamps) kept for security and abuse prevention.

What we monitor — and what we don't

We only crawl public pages you point us at, respecting each site's robots.txt and rate limits, through a transparent, identifiable crawler. We never bypass logins, solve CAPTCHAs, or use rotating proxies to evade detection — that's a hard rule for us, not a configuration option.

How we use AI

We use AI models to classify detected changes and, on some plans, to write a short interpretation of their likely impact. That interpretation is always labeled as AI-generated inference, never presented as fact — the underlying diff we show you is the actual evidence.

Those models are accessed through OpenCode Zen, a US-hosted AI gateway: DeepSeek V4 Flash classifies each change, and Anthropic's Claude writes the impact interpretation. The gateway and its model providers operate under zero-retention terms — your data is not used to train their models. We never send them your password, billing details, or the contents of your email inbox.

Who we share data with

• Paddle — billing and tax compliance, as merchant of record.
• Resend — delivery of transactional email (verification, alerts, weekly reports).
• OpenCode Zen — the AI gateway through which change classification and impact analysis run, described above. Its underlying model providers include DeepSeek and Anthropic.
• Cloudflare — network security and cookieless, aggregate web analytics.

We don't sell your data, and we don't share it with anyone else for advertising purposes.

How long we keep it

Retention depends on your plan: normalized snapshots and change history are kept for 60, 180 or 365 days depending on tier. Downgrading a plan pauses data above your new limits rather than deleting it; closing your account deletes it on request.

Cookies

We use a session cookie to keep you signed in and a CSRF cookie to protect against cross-site request forgery — no third-party advertising or tracking cookies. Site analytics run through Cloudflare's cookieless, aggregate Web Analytics.

Your rights

You can request a copy of your data, ask us to correct it, or ask us to delete your account and its data entirely. Email us at [email protected] and we'll act on it promptly.

Contact

Questions about this policy? Reach us at [email protected].