Privacy Policy

Last updated 3 November 2026

This policy explains what personal data RivalPulse collects, why, and what your rights are. RivalPulse is run by Jamiu Oyero, a sole trader trading as RivalPulse, based in England, UK. For UK data protection law we are the "controller" of your personal data.

Questions or requests: support@rivalpulse.co.uk.

What we collect

• Waitlist: your email address and the date you joined.
• Account: your email address, a securely hashed password (we never see or store the password itself), your time zone, preferred email time and display currency.
• Your tracking: the competitor store addresses you add, and the public product, price and stock information we read from those stores.
• Billing: your plan, subscription status, and Stripe customer and subscription references. Card details are entered on Stripe's pages and go straight to Stripe. We never see or store your card number.
• Technical: our hosting provider keeps short-lived server logs (such as IP address, browser type and the pages requested) to run and secure the service.

Why we use it, and our lawful basis

• To provide the service you signed up for (contract): running your account, scanning the stores you choose, and sending your digests, alerts and password-reset emails.
• To take payment (contract and legal obligation): handling subscriptions and keeping financial records as tax law requires.
• To invite you from the waitlist (legitimate interests, and because you asked): we email you once early access is ready. We don't sell or share your address and we don't send unrelated marketing.
• To keep the service secure and working (legitimate interests): preventing abuse and fixing problems.

Who we share it with

We use a small number of trusted providers who process data on our behalf, only as needed to run RivalPulse:

• Railway: hosts the application and database (EU region).
• Stripe: payments, subscriptions and invoices.
• Resend: sends our emails (EU region).
• Google Workspace: our support mailbox, if you email us.

Some of these companies are based in the United States. Where your data is transferred outside the UK, it is protected by the UK's approved safeguards, such as the UK International Data Transfer Addendum or the UK–US data bridge. We never sell your personal data.

Cookies

We use one essential cookie to keep you logged in and protect forms from misuse, and we remember your chosen display currency. We don't use advertising or tracking cookies, so there is no cookie banner.

How long we keep it

• Account data: while your account is open. When you delete your account in Settings, it is removed straight away, and from our rolling daily backups within 7 days.
• Detected changes: up to 180 days.
• Waitlist emails: until you're invited or ask us to remove you.
• Billing records: kept by Stripe and in our accounts for as long as UK tax law requires (normally 6 years).

Your rights

You can ask to access, correct, delete or receive a copy of your personal data, and you can object to or ask us to restrict how we use it. You can delete your account yourself at any time in Settings. For anything else, email support@rivalpulse.co.uk and we'll reply within one month.

If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to put things right first.

Security

The site uses HTTPS throughout, passwords are hashed with a strong algorithm, and access to the systems that hold your data is limited to the people who run RivalPulse.

Changes

If we make important changes to this policy, we'll update the date above and tell account holders by email.