Privacy Policy

Last updated: August 10, 2026

Draft notice: This document was generated as a starting point and has not been reviewed by a lawyer. If you have or expect users in California, the EU/UK, or other jurisdictions with specific privacy laws, have this reviewed before publishing.

This Privacy Policy explains what information RivalAgent Flip Finder ("we," "us") collects, how we use it, and your rights regarding it.

1. Information We Collect

Data	Why we collect it
Email address	Account creation, login, and communicating with you about your account or subscription
Password (stored as a salted, one-way hash — never in readable form)	Account authentication
Subscription & billing status	Determining access level; billing itself is handled entirely by Stripe (see below) — we do not store your card number
Usage data (pages viewed, properties viewed/saved, buttons clicked)	Understanding engagement and improving the Service, via Google Analytics (GA4)
IP address, general device/browser info	Security, fraud prevention, and basic analytics, via our hosting provider (Cloudflare) and Google Analytics

2. Third Parties We Share Data With

Stripe (payment processing) — handles your payment details directly; we never see or store your full card number. See Stripe's Privacy Policy.
Google Analytics (GA4) — collects usage/engagement data via cookies. See Google's Privacy Policy.
Cloudflare — our hosting and infrastructure provider, which processes traffic and stores our database. See Cloudflare's Privacy Policy.

We do not sell your personal information to third parties.

3. Cookies

We use cookies set by Google Analytics to understand how visitors use the Service. You can block cookies in your browser settings; doing so will not prevent you from using the Service, though some analytics may be incomplete.

4. Data Retention

We retain your account information for as long as your account is active. If you request deletion (see below), we delete your account record from our database, though Stripe retains payment records independently for tax and compliance purposes as required by law.

5. Your Rights

You can request to:

Access the personal data we hold about you
Delete your account and associated data
Correct inaccurate information

To exercise any of these rights, email support@rivalagent.ai. We will respond within a reasonable time, generally within 30 days.

6. Security

Passwords are hashed using PBKDF2 with a per-user salt before storage — we never store or have access to your plaintext password. Data is stored in Cloudflare's D1 database and transmitted over HTTPS. No system is perfectly secure, and we cannot guarantee absolute security.

7. Children's Privacy

The Service is not directed at, and we do not knowingly collect information from, anyone under 18.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date above.

9. Contact

Questions about this Policy or your data: support@rivalagent.ai