Privacy Notice

1. Who we are

Rivved is operated from Lithuania and is the data controller for the personal data described in this notice, which means we decide how and why it is used. You can contact us about privacy at the contact form on rivved.com.

2. What we collect and why

• Account data — your email address, password (stored only as a secure hash) and any name you provide. Used to create and secure your account and to sign you in. Legal basis: performance of our contract with you.
• Monitoring settings and content — the competitor names, website addresses and pages you choose to monitor, together with the page snapshots, detected changes and AI analysis generated from them. Used to provide the service. Legal basis: performance of our contract.
• Notification preferences and email activity — your alert thresholds and whether an alert or weekly digest was sent successfully. Used to deliver notifications you asked for and to diagnose delivery problems. Legal basis: performance of our contract.
• Subscription data — your plan, trial dates, subscription status, billing period and the customer and subscription references from our payment provider. Used to apply your plan and its limits. Legal basis: performance of our contract and our legal obligations.
• Support messages — anything you send us by email. Used to answer you. Legal basis: legitimate interests in supporting our customers.
• Technical and usage data — IP address, device and browser information, log and error data. Used to keep the service secure and reliable and to fix faults. Legal basis: legitimate interests in security and service quality.

Payment card details are never collected or stored by us — they are handled directly by our payment provider.

3. Who we share data with

• Service providers that operate parts of Rivved on our behalf: cloud hosting and database, web page fetching, AI analysis and email delivery providers. They may process personal data only on our instructions.
• Paddle, our Merchant of Record, for the sale of subscriptions, subscription management, payments, invoicing and tax compliance.
• Professional advisers such as accountants and lawyers, where necessary.
• Public authorities, where we are required to disclose data by law.

We do not sell your personal data.

4. International transfers

Some of our providers process data outside the European Economic Area. Where that happens we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses or an adequacy decision for the destination country.

5. How long we keep data

We keep account, monitoring and subscription data for as long as your account is active. After you close your account we delete or anonymise it within a reasonable period, except where we must keep records longer to meet legal, accounting or tax obligations. Technical logs are kept for a short retention period only.

6. Your rights

Subject to applicable law, you have the right to access your personal data and to request rectification, erasure, restriction of processing or portability, to object to processing based on legitimate interests, and to withdraw consent where processing relies on it. You may also lodge a complaint with your data protection authority — in Lithuania, the State Data Protection Inspectorate. Use the contact form on rivved.com to exercise a right; we will respond within one month.

7. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, hashed passwords, access controls and database rules that restrict every account to its own data.

8. Cookies and similar technologies

Rivved uses only essential cookies and browser storage needed to keep you signed in and to keep the service secure. We do not use advertising cookies. Our checkout provider may set cookies necessary to process a payment. You can clear or block cookies in your browser settings, but signing in will not work without the essential ones.

9. Changes to this notice

If we change how we handle personal data we will update this page and revise the "last updated" date above.