RivalMap

Privacy policy

Effective 13 October 2026

This policy explains what personal information RivalMap (“we”) collects when you use rivalmap.tech and the RivalMap app, what we do with it and the choices you have. We are the controller of this information. Questions and requests go to [email protected].

1. What we collect

  • Account details: your e-mail address, display name and password (stored hashed, never in plain text). If you sign in with a third-party account, we receive your name, e-mail address and profile picture from it.
  • What you do in the service: the points, trades and radiuses you scan, the business you add under My business, the reports you buy, the questions you ask about them, and your credit balance and history. We keep these so you can reopen your work and so charges are correct.
  • Purchase details: when you buy credits, our merchant of record Lemon Squeezy sends us the order number, amount, currency, your name, e-mail address and country. We never receive or store your full card number.
  • Technical information: IP address, browser and device type, pages viewed and the page that sent you to us. At sign-up we use your IP address to work out your country, which decides the currency you are offered.
  • Messages: what you write when you contact us.

2. How we use it

  • To run the service: sign you in, run scans and reports, keep your credit balance.
  • To take payments and keep the records tax law requires.
  • To send service e-mails: address verification, receipts, a report being ready, important changes.
  • To answer support requests.
  • To keep the service secure and prevent fraud and abuse, such as repeated free-credit sign-ups.
  • To understand, in aggregate, which parts of the service are used and where it breaks, so we can improve it.

Our legal bases are the contract with you (running the service and taking payment), legal obligations (tax records), and our legitimate interests (security, fraud prevention, improving the service). We do not sell your personal information and do not use it for advertising by others.

3. AI processing

To write a report or answer a follow-up question, we send the public reviews being analysed, the scan settings and your question to an AI model provider. We do not send your e-mail address or payment details. The provider processes this data on our behalf to produce the answer.

4. Who we share it with

Only with service providers that help us run RivalMap, each limited to what it needs:

  • Lemon Squeezy, our merchant of record, for payments, tax and receipts;
  • hosting and content delivery providers that run and protect our servers;
  • an e-mail delivery provider for service e-mails;
  • an AI model provider for reports (section 3);
  • analytics and session-replay tools that show how pages are used;
  • a sign-in provider, if you choose to sign in with a third-party account.

We may also disclose information when the law requires it, or to protect our users or the service from fraud or harm.

5. Cookies and similar storage

  • Sign-in: your session is kept in your browser’s storage so you stay signed in.
  • Preferences: your language and light or dark theme.
  • Visit history: a first-party cookie (ll_vid, kept up to 400 days) lets us see which pages you viewed and where you came from, so we know which channels bring visitors and can help you better. These logs are deleted after 180 days.
  • Analytics: our analytics and session-replay tools set their own cookies to measure use of the site.

You can clear or block cookies in your browser. Signing in needs browser storage to work.

6. Business information shown in RivalMap

Scans and reports use information businesses and their customers have made public: business names, addresses, categories, ratings, review counts and review text. Reports describe what reviewers say as a group. RivalMap does not show phone numbers or e-mail addresses of businesses or reviewers. To have information about your business corrected or removed, write to [email protected]; we handle it within 7 business days.

7. How long we keep it

  • Account and usage data: while your account is open. When you delete your account, it is deleted.
  • Purchase records: as long as tax and accounting law requires, even after the account is deleted.
  • Visit logs: 180 days.
  • Support messages: as long as needed to handle your request.

8. Security

Traffic to and from RivalMap is encrypted (HTTPS), passwords are stored hashed, and only the people who operate the service can reach account data, and only when needed to run it or to help you.

9. Your rights

Depending on where you live (for example under the GDPR in the EU and UK, or in California), you can:

  • see the personal information we hold about you and get a copy of it;
  • have it corrected or deleted;
  • object to or restrict some uses of it;
  • take it to another service in a portable format.

You can edit your details and delete your account in Settings. For anything else, write to [email protected] from the address on your account. We reply within 30 days. You may also complain to the data protection authority where you live.

10. International transfers

Our servers and some of our providers are located outside your country. When we transfer personal information abroad, we rely on our providers’ contractual safeguards to protect it.

11. Children

RivalMap is a business tool and is not meant for anyone under 16. We do not knowingly collect their information.

12. Changes

We may update this policy. The new version applies from the date at the top of this page; if a change is significant, we will tell you by e-mail. See also our terms of service.

Contact

RivalMap, [email protected].