RivalGauge
Privacy
What we collect, who touches it, and how long it stays. In plain language, because a privacy page nobody can read is not a privacy page.
This website
rivalgauge.com is a set of static pages. It sets no cookies, runs no analytics script, embeds no third party content and makes no request to any host other than its own. Fonts are served from this domain rather than a font network, which is a privacy decision as much as a performance one.
Our host records standard server logs for the requests that reach it, including IP address and user agent. We do not build profiles from those logs.
If we ever add analytics it will be a privacy preserving product that does not track people across sites, and this page will say so before it goes live.
When you open an account
Starting a trial collects a company name and an email address. Payment is handled entirely by Stripe on their own hosted page. We never see or store your card number. What we keep is the Stripe customer and subscription identifier, your plan, and your subscription status.
Your account also stores the settings you choose: your logo, brand colours, call to action text, sending address, webhook URL, booking link and the list of domains you manage.
Data a scan collects
A scan reads publicly available information about the domain that was submitted and about the businesses that rank near it. That includes published website content and headers, DNS records, public domain registration dates, public performance measurements and public business listings and review counts.
No scan reads anything behind a login, and no scan changes anything on the site it measures.
The people your prospects are
When a visitor uses the widget on your site, they give an email address and a domain to get their report. That record belongs to your account. We store it so the report can be delivered, so you can see the lead, and so the shareable report page works for its 90 day life.
You are the controller of your own leads, and we are the processor. We do not sell them, we do not market to them, and we do not use one customer's leads to serve another customer. Making sure you have a lawful basis for contacting the people who use your widget is your responsibility, since it is your form on your site.
Who else handles the data
| Processor | What for |
|---|---|
| Cloudflare | Hosting, the application platform, and the database the records live in |
| Stripe | Checkout, subscriptions and payment. Card details go to Stripe, never to us |
| Resend | Sending the report email and account email |
| Places business listings and PageSpeed performance measurements used to build a report | |
| Ahrefs | Domain Rating figures used to build a report |
| OpenRouter, and the AI models routed through it | The AI visibility check asks three models what they know about the scanned business |
| Public DNS and RDAP services | DNS records and domain registration dates used to build a report |
Each of those handles data under its own terms. We add processors only where a feature needs one.
Lead data also goes to the agency whose widget collected it, and to any webhook endpoint that agency has configured, such as their CRM. That is the product working as designed rather than a side effect: the agency is the controller of its own leads.
How long it is kept
Lead records are kept while your account is open, so your lead list is there when you come back for it. Close your account and ask, and we will delete them. Billing records are kept for as long as tax and accounting rules require.
The shareable report page is a snapshot with its own, shorter life: it expires 90 days after the scan. The lead record and the emailed report are unaffected when it does, and a scan still completes even if the shareable link cannot be stored.
A shareable report page is marked no index, so it does not appear in search results. It is unlisted rather than secret: anyone holding the link can open it.
Your choices
You can ask us for a copy of the data held about you, ask for it to be corrected, or ask for it to be deleted. Report emails carry a one click unsubscribe header and an opt out link. Write to the address below and we will answer.
Contact
Privacy questions go to support@rivalgauge.com. Tell us what you need and we will answer within a few business days.