Privacy Policy
Last updated: 14 October 2026
This policy explains what personal data Rival Ads ("we", "us") collects, why, and the choices you have.
Rival Ads is a trading name of Edington Ltd, a company registered in England and Wales under company number 15548727, with its registered office at 7 Hardwicke Road, Reigate, England, RH2 9HJ. Edington Ltd is the controller of the personal data this policy describes.
1. Data we collect about you
| Category | Examples | Purpose |
|---|---|---|
| Account | Name, email, hashed password | Authentication, communication |
| Workspace | Workspace name, team membership, roles, branding | Providing the product |
| Billing | Plan, subscription status (card details stay with the payment processor) | Payments and plan limits |
| Usage | Pages visited, product events | Improving the product |
| Support | Contact-form messages, live-chat conversations | Helping you |
2. Competitor ad data
The ads we track come from the public ad libraries of Meta, Google, TikTok and LinkedIn — information those platforms publish as a transparency measure. It concerns advertisers (companies), not private individuals, and we store it to provide historical tracking and analysis to our customers.
3. Processors we rely on
- Stripe — payments (we never see your card number)
- Amazon Web Services — hosting (EC2), media storage (S3) and transactional/digest email delivery (SES)
- Anthropic / Vercel AI Gateway — AI analysis of tracked ads
- Google Analytics 4 — anonymous product analytics
- Sonny — live chat
Connections you authorize
When you connect an external client such as ChatGPT or Codex through our API or MCP server, that client can receive workspace and project names, tracked ads and their source links, available analyses, saved-ad notes and note-author names, report links and sync status as needed for the tools you use. OAuth sign-in can also share your account name, email and email-verification status when those scopes are requested. Write access allows the client to make supported changes on your behalf. Only connect clients you trust; their own privacy policies govern data they receive. Passwords, API-key secrets and report passwords are not returned in tool results.
4. Legal bases
We process account and billing data to perform our contract with you; analytics and product-improvement data based on legitimate interest (or consent where required); and marketing communications only with your consent.
5. Retention
- Account and workspace data: while your account is active, plus 90 days.
- Billing records: as long as tax law requires.
- Contact messages: up to 24 months.
6. Your rights
Depending on where you live (including under GDPR and CCPA) you may have rights to access, correct, export, delete or restrict processing of your personal data. Email support@rivalads.io and we'll respond within 30 days.
7. Security
Passwords are hashed, transport is TLS-encrypted end to end, database access is restricted, and workspace data is isolated per tenant. No method of storage is 100% secure, but we treat your competitive research as the sensitive material it is.
8. Cookies
We use a session cookie to keep you signed in and analytics cookies to understand product usage. We don't run third-party advertising trackers.
9. Changes
We'll announce material changes to this policy by email or in-app before they take effect.
10. Contact
Privacy questions: support@rivalads.io.