Privacy Policy

RivalWatch (the “Service”) is operated by Cadrex Systems LLC (“we,” “us,” “our”), a limited liability company organized in Colorado, USA. This policy explains what personal information we collect, how we use it, and the choices you have. Questions: info@joinrivalwatch.com.

1. Information we collect

• Account data — your name, email address, and a securely hashed (never plaintext) password.
• Service data you provide — the competitor websites/URLs you choose to monitor and any notes or settings you add.
• Usage & technical data — IP address, timestamps, and request metadata, used for security, rate-limiting, and abuse prevention.
• Billing data — if you subscribe, payments are processed by Stripe. We receive a customer identifier and subscription status; we never receive or store your full card number.
• Communications — messages or feedback you send us.

2. How we use your information

• To provide the Service — monitor the pages you add, detect changes, and generate summaries.
• To send you transactional email (verification, password reset, change digests, billing notices).
• To operate, secure, and improve the Service, and to prevent fraud and abuse.
• To comply with legal obligations.

We do not sell your personal information.

3. Service providers (sub-processors)

We share data only with vendors that help us run the Service, under contract:

• Stripe — payment processing and subscription billing.
• Resend — sending transactional and digest emails.
• Anthropic — AI processing of the publicly available competitor page content you ask us to monitor, to generate change summaries and briefs. We do not send your account password or payment details to Anthropic.
• Render and Cloudflare — hosting, content delivery, and network security.

4. Cookies

We use a single essential, HTTP-only session cookie to keep you signed in. We do not use third-party advertising or cross-site tracking cookies. Because the cookie is strictly necessary to provide the Service, no consent banner is required for it.

5. Data retention

We keep your account data while your account is active. Monitoring snapshots and change history are retained to power your change feed and may be pruned over time. When you delete your account, we delete your personal data from our active systems; residual copies may persist in encrypted backups for a limited period before rotation, and certain records may be retained as required by law.

6. Your rights

Depending on where you live (including under GDPR and CCPA/CPRA), you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can delete your account and its data at any time from your account settings, or email info@joinrivalwatch.com to exercise any of these rights. We will not discriminate against you for exercising them.

7. Security

Passwords are hashed with scrypt, sessions are signed, traffic is served over HTTPS, and access is restricted. No method of transmission or storage is 100% secure, but we work to protect your data.

8. International users

We operate in the United States. If you access the Service from elsewhere, your information will be processed in the U.S. and other countries where our providers operate.

9. Children

The Service is not directed to anyone under 18 and is intended for business use. We do not knowingly collect data from children.

10. Changes

We may update this policy; we will revise the “Last updated” date and, for material changes, notify you by email or in-app.

11. Contact

Cadrex Systems LLC · Colorado, USA · info@joinrivalwatch.com