Privacy Policy
We are DRIVEBYTE SRL, the controller of the personal information described in this policy. Contact contact@rivaltrends.io about privacy, your account or information appearing in our research.
Information we use
| Information | Why we use it and our legal basis |
|---|---|
| Account and authentication details, selected company websites, subscription and payment records | Provide and administer the service under our contract with you. For business representatives, our legitimate interest in administering the business relationship applies. Necessary financial records are also processed to meet legal obligations. |
| Technical, security, diagnostic and usage records, including relevant account, network and browser information | Operate and protect the service, investigate faults and misuse, understand product use and manage costs, in our legitimate interests. |
| Correspondence, attachments and feedback you provide | Respond to enquiries, provide contractual support, handle complaints and meet legal duties when dealing with rights requests. Other relevant correspondence is handled in our legitimate interests. |
| Public professional information about people associated with companies, including names, roles and attributed statements, captured sources and AI-assisted analysis | Produce and substantiate company research and explain changes, in our legitimate interests and those of customers conducting business research. |
| Consent, contractual and request records | Record choices, demonstrate compliance and handle legal claims, under applicable legal obligations and our legitimate interests. |
Stripe collects payment and necessary billing information through its hosted services. We receive information needed to administer your subscription. Account information is needed to provide access; the product input you supply is the website of each company you track. Other information may be volunteered through support or feedback. Please avoid sending passwords, full card details, unnecessary identity documents or sensitive information.
Research and AI
Research uses company websites, official communications, public registers and other public sources. Saved sources can contain information beyond the facts displayed in a company profile. AI helps organize and interpret this material, and its output can contain mistakes or outdated information.
We do not use private account information, tracked-company selections or support correspondence to train AI models. People mentioned in research can contact us without an account to ask about their information, report errors, object to its use or request removal.
Recipients and processing locations
We use service providers for authentication, payment, hosting, storage, security, diagnostics, AI processing and email. These include Auth0, Stripe, Microsoft Azure, Neon, Cloudflare, Elastic, OpenAI, Microsoft 365 and Postmark. Providers may also process information for their own legal or independent purposes under their terms and privacy notices.
Authorized operators and advisers may access information where necessary. We may disclose information to meet legal obligations or establish, exercise or defend legal rights. Subscribers receive information included in company research. Private account details, tracked-company selections, identifiable usage records and support correspondence are not made available to other subscribers or sold or licensed to third parties.
Information may be processed outside Romania and the European Economic Area, including in the United States, by providers and research recipients. Contact us for information about relevant recipients, processing locations and applicable international-transfer safeguards, including how to obtain a copy.
Browser storage and communications
Sign-in, payment and security services use browser storage. The application also stores preferences such as your chosen theme and language. Disabling necessary storage may affect sign-in or payment. We do not use advertising pixels, cross-site remarketing or session recordings.
Account, billing, service and legal notices are sent as needed. Promotional emails require a separate opt-in and provide a way to unsubscribe.
Retention
We retain personal information for as long as reasonably necessary for the purposes described here. Account and workspace retention depends on the account relationship, service administration and relevant requests. Support and diagnostic retention depends on resolving the matter, protecting the service and any continuing need for evidence. Research and sources are retained according to their relevance to company research, accuracy and supporting evidence. Financial, contractual and legal records are retained for applicable legal duties and justified claims periods.
An inactive or unpaid subscription does not itself trigger automatic deletion. You can request deletion by email. Limited information may remain where retention is legally required or otherwise justified. Copies in backups and provider systems are subject to their applicable retention and deletion processes. We explain relevant retained categories and incomplete actions when responding to a request.
Your rights and account deletion
Subject to applicable law, you may request access, correction, erasure, restriction or portability, and object to processing based on legitimate interests. You may withdraw consent without affecting earlier lawful processing and object to direct marketing at any time. These rights are available without paid access.
Email contact@rivaltrends.io, identifying the account or research concerned. We ask only for information reasonably needed to verify identity or authority and understand the request. GDPR requests receive a response without undue delay and normally within one month; a permitted extension of up to two further months is explained within the first month. We explain any lawful limitation or refusal and available complaint routes.
For verified account-deletion requests, we stop future subscription renewals promptly. Product access ends when deletion is carried out, including any remaining paid time. Account deletion and subscription cancellation have different effects. Independently collected public-source research is assessed separately from private account information.
Payment and subscription checks determine product access automatically. Contact us to request human review of an incorrect access decision.
You can complain to Romania’s data-protection authority, ANSPDCP, or another competent authority, and exercise applicable court remedies.
Changes
We provide notice of material processing changes and obtain consent where required.