Privacy Policy | Rival Shark

Rival Shark Technologies LLC (“Rival Shark,” “we,” “us,” or “our”) operates the competitive intelligence platform available at rivalshark.ai and rivalshark.com (collectively, the “Service”). This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your data.

By accessing or using the Service, you agree to the collection and use of information described in this policy. If you do not agree, do not use the Service.

1. Information We Collect

1.1 Information You Provide

Account registration: name, email address, and password.
Billing and payment: payment card details and billing address. Payment transactions are processed by our payment processor. We do not store full card numbers on our systems.
Business inputs: company name, competitor names, industry categories, geographic markets, and strategic objectives you enter to configure your reports.
Communications: emails, support requests, or other messages you send to us.

1.2 Information We Collect Automatically

Usage data: pages visited, features used, report types generated, timestamps, and session duration.
Device and browser data: IP address, browser type and version, operating system, and referring URL.
Cookies and similar technologies: session identifiers and persistent preference cookies. See Section 7.
Error and performance logs: diagnostic data generated by our error monitoring tools.

1.3 Information From Third Parties

Publicly available web data: when you configure a competitor for tracking, our AI system performs live web searches on that competitor using publicly accessible sources. This data is processed to generate your intelligence reports and is not independently sold or redistributed.
Payment processors: our payment processor may share transaction status and basic billing confirmation with us.

2. How We Use Your Information

We use the information described above for the following purposes:

Providing and operating the Service, including generating competitive intelligence reports based on your configured inputs.
Processing your subscription and managing your billing through our payment processor.
Communicating with you about your account, subscription status, product updates, and support requests.
Improving the Service — analyzing aggregate usage patterns, diagnosing errors, and developing new features.
Enforcing our Terms of Service and applicable legal obligations.
Preventing fraud, unauthorized access, and other harmful activity.

We do not sell your personal information. We do not use your business inputs (competitor names, strategic objectives, or report content) to train AI models or to share competitive intelligence data with any other customer or third party.

3.1 Service Providers

We share information with third-party service providers who assist us in operating the Service. These providers are contractually required to use your data solely for the purpose of delivering services on our behalf and may not use it for their own purposes.

Categories of providers we work with include:

AI inference providers — process your business inputs to generate intelligence reports
Database and authentication providers — store account data, report data, and manage user authentication
Payment processors — handle subscription billing and payment transactions; we do not store full card numbers
Cloud hosting and infrastructure providers — host and deliver the Service
Email communication providers — deliver transactional and lifecycle communications
Error monitoring and analytics providers — support operational diagnostics and performance tracking

A current list of our service providers is available upon written request to privacy@rivalshark.com.

3.2 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of Rival Shark, our users, or the public.

3.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, your information may be transferred to the acquiring entity. We will provide notice before your information becomes subject to a materially different privacy policy.

3.4 Data Processing Agreements

Enterprise customers with contractual requirements for a Data Processing Agreement may request one by contacting legal@rivalshark.com. We will work with eligible customers to execute appropriate agreements on a case-by-case basis.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements.

Account data: retained for the duration of your subscription and for up to 30 days following account deletion or termination, after which it is deleted or anonymized.
Report data: competitive intelligence reports generated by the Service are retained in your account for the duration of your active subscription. Upon account deletion or termination, report data is deleted alongside account data within the same 30-day window.
Billing records: retained for seven (7) years as required for tax and accounting compliance.
Aggregated, de-identified data: may be retained indefinitely for product analytics and improvement.

5. Your Rights and Choices

5.1 Access, Correction, and Deletion

You may access, update, or correct your account information at any time through your account settings at rivalshark.ai. To request deletion of your account and associated personal data, contact us at privacy@rivalshark.com. We will process deletion requests within 30 days, subject to any legal obligations requiring retention.

5.2 Data Portability

Upon written request to privacy@rivalshark.com, we will provide you with a copy of the personal information you have provided to us. Data will be delivered in a machine-readable format (JSON or CSV, depending on data type) within 30 days of a verified request, to the extent technically feasible.

5.3 Opt-Out of Marketing Communications

You may opt out of marketing and promotional emails by clicking the unsubscribe link in any such email or by contacting marketing@rivalshark.com. Transactional emails related to your account and subscription (receipts, renewal notices, security alerts) are not subject to opt-out.

5.4 Cookies

You may configure your browser to reject cookies or to notify you when cookies are set. Note that disabling certain cookies may affect Service functionality. See Section 7 for details.

5.5 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to delete personal information, and the right to opt out of the “sale” of personal information. We do not sell personal information as defined by the CCPA. To exercise your rights, contact privacy@rivalshark.com with the subject line “California Privacy Request.”

5.6 International Users

The Service is operated from the United States and is primarily intended for users based in the United States. Users located outside the United States may access and use the Service, and by doing so acknowledge that their personal data will be transferred to, stored, and processed in the United States.

We respect applicable local data protection laws to the extent reasonably practicable. If you are located in the European Economic Area, the United Kingdom, Australia, Canada, or another jurisdiction with data protection requirements, you retain rights under your local laws regarding access, correction, deletion, and portability of your personal data. To exercise any such rights, contact privacy@rivalshark.com. We will respond within 30 days.

We do not currently maintain active operations, directed marketing, or localized offerings in any jurisdiction outside the United States. Use of the Service from outside the United States is at the user's own discretion and subject to local legal compliance obligations.

6. Data Security

We implement reasonable technical and organizational measures to protect your information against unauthorized access, disclosure, alteration, and destruction. These measures include:

Encryption of data in transit via TLS.
Encryption of data at rest within our database infrastructure.
Access controls limit employee access to personal data on a need-to-know basis.
Periodic security reviews of our infrastructure and application code.

No method of transmission over the internet or method of electronic storage is completely secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. In the event of a data breach that affects your rights or freedoms, we will notify affected users as required by applicable law.

7. Cookies and Tracking Technologies

We use the following types of cookies and similar technologies:

Strictly necessary cookies: required for authentication, session management, and core Service functionality. These cannot be disabled without preventing use of the Service.
Functional cookies: remember your preferences (e.g., display settings, language).
Analytics cookies: measure how users interact with the Service in aggregate to help us improve. We use anonymized or aggregated data only.

We do not use advertising or cross-site tracking cookies. You may manage cookie preferences through your browser settings. A detailed Cookie Policy is available at rivalshark.com/cookie-policy.

8. Third-Party Links and Integrations

The Service may contain links to third-party websites or may integrate with third-party services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party sites or services you access through the Service. We are not responsible for the privacy practices or content of third-party sites.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that a user under 18 has provided personal information, we will delete that information promptly. If you believe a child has provided us with personal information, contact privacy@rivalshark.com.

10. International Data Transfers

Rival Shark Technologies LLC is based in the United States. All personal data collected through the Service is transferred to, stored, and processed in the United States, where our infrastructure and service providers operate.

Data protection laws in the United States may differ from those in your country or jurisdiction and may not provide equivalent protections. By accessing the Service from outside the United States, you acknowledge this and consent to the transfer and processing of your personal information in the United States.

Jurisdiction-Specific Disclosures

European Economic Area and United Kingdom. We do not currently maintain directed operations or localized offerings in the EEA or UK. Users in these jurisdictions who choose to access the Service do so at their own discretion. We intend to implement Standard Contractual Clauses and appropriate transfer mechanisms prior to any active commercial expansion into these markets.

Australia. Your personal information may be disclosed to overseas recipients, including our service providers operating in the United States. We take reasonable steps to ensure those recipients handle your information in a manner consistent with the Australian Privacy Principles.

Canada. We handle personal information in accordance with the principles of Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) to the extent applicable. Our Privacy Officer is responsible for our compliance with applicable Canadian privacy obligations and can be reached at privacy@rivalshark.com.

Sanctioned Jurisdictions. The Service is not available to users located in, or acting on behalf of entities organized under the laws of, any jurisdiction subject to comprehensive U.S. economic sanctions, including but not limited to Iran, North Korea, Cuba, Syria, and the Crimea, Donetsk, and Luhansk regions of Ukraine. Use of the Service in violation of applicable sanctions laws is prohibited.

We will update this section as our international compliance framework develops, including the implementation of formal data transfer mechanisms for EEA and UK users prior to active commercial expansion into those markets.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (to the address associated with your account) and by posting the updated policy on rivalshark.com with a new effective date. Your continued use of the Service after the effective date of any change constitutes your acceptance of the updated policy. For material changes, we may require your affirmative acknowledgment before continued use of the Service.

We encourage you to review this policy periodically.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at:

Rival Shark Technologies LLC
Attn: Privacy Officer
Email: legal@rivalshark.com
Website: rivalshark.com
Registered Address: 202 N Cedar Ave Ste 1, Owatonna, MN 55060-2306, USA

We will respond to all privacy-related inquiries within 30 days of receipt.