Privacy

Who we are

RivalScout is owned and operated by GRAVITY115™. GRAVITY115™ is the data controller for any personal information processed in connection with your use of RivalScout.

What we collect

We also store the results of every run: search, press, social, demand, pricing, release and customer-voice data gathered from public sources about the domains you asked us to watch.

What we do not collect

We do not collect data from behind logins or paywalls, we do not buy personal data, and we do not sell or share your watchlists, runs or digests with anyone outside your team.

How we use it

Your data is used to run your watchlists, generate digests and alerts, and to operate and support the service. Aggregate, non-identifying usage statistics help us improve reliability.

Who can see it

Only you and the people you invite. Access is enforced at the database level with per-row rules and owner, editor and viewer roles, so an invitation grants exactly the access you chose and nothing more.

Processors

We use a small number of infrastructure and data providers to host the application, store data, send email and collect public signals. They process data only on our instructions and only to deliver the service.

Retention

Runs are kept as an immutable history for as long as your account is active, because comparison over time is the product. Delete a watchlist and its runs are removed. Close your account and we delete your data within 30 days.

Your choices

You can export your data as CSV or PDF, correct your profile at any time, and request access or deletion by writing to privacy@rivalscout.io. We respond within 30 days.

Security

Data is encrypted in transit and at rest. API keys are stored only as hashes. Scheduled jobs authenticate with private tokens, and every read is checked against your role.

Changes

If this policy changes materially we will tell account owners by email before the change takes effect.