California Privacy Notice (CCPA / CPRA)
What personal information we collect and your rights as a California resident under the CCPA and CPRA.
Service: RivalLens (rivallenslabs.com) Version: 1.0 Effective date: 2026-10-23 Last updated: 2026-06-28
This Notice supplements our Privacy Policy (rivallenslabs.com/legal/privacy) and applies to California residents under the California Consumer Privacy Act, as amended by the CPRA (Cal. Civ. Code §1798.100 et seq.). Capitalized terms have the meaning given in the CCPA/CPRA.
1. Categories of personal information we collect
In the last 12 months we collect, from California consumers who are our customers:
| CCPA category (§1798.140(v)) | Examples | Collected? |
|---|---|---|
| Identifiers | Email, account ID, IP address | Yes |
| Commercial information | Purchase records | Yes |
| Internet/network activity | Usage logs, device/browser data | Yes |
| Geolocation (coarse) | Approximate region from IP | Yes |
| Inferences | None used to build a consumer profile | No |
| Sensitive personal information | We do not collect SPI for inference; password is hashed | Minimal |
Publicly available information is excluded. Founder/investor names and other data we obtain from public sources are "publicly available information" and are excluded from "personal information" under §1798.140(v)(2). This Notice therefore concerns mainly our customers' data.
2. Sources
Directly from you (account, inputs, purchases); automatically (usage/technical data); and, for report content, publicly available sources (excluded as above).
3. Business/commercial purposes for collection
To provide and operate the Service, process payments (via our Merchant of Record), provide support and refunds, ensure security and prevent fraud, comply with law, and measure aggregate usage. See the Privacy Policy for detail.
4. Disclosure of personal information
We disclose personal information to service providers (sub-processors — see rivallenslabs.com/legal/sub-processors) for the purposes above, under contracts that restrict their use.
5. We do NOT sell or share your personal information
We do not "sell" personal information, and we do not "share" it for cross-context behavioral advertising, as those terms are defined in the CCPA/CPRA. We do not use the data of consumers we know to be under 16 for sale/share.
If we later enable Google Analytics 4 with advertising features, this could constitute "sharing". Before doing so we will provide a "Do Not Sell or Share My Personal Information" link, honor the Global Privacy Control (GPC) browser signal, and update this Notice.
6. Your California rights
You have the right to:
- Know / Access the categories and specific pieces of personal information we hold;
- Delete personal information (subject to exceptions);
- Correct inaccurate personal information;
- Opt out of sale/sharing (not applicable today — we do neither);
- Limit use of sensitive personal information (we do not use SPI for inference);
- Non-discrimination for exercising your rights.
7. How to exercise your rights
Email privacy@rivallenslabs.com with "California Privacy Request" in the subject. We will verify your request (typically by confirming control of the account email). You may use an authorized agent with proof of authorization. We respond within 45 days (extendable by 45 days with notice). We honor the Global Privacy Control signal where applicable.
8. Retention
We retain personal information per the schedule in our Privacy Policy (§8) and only as long as necessary for the disclosed purposes or as required by law.
9. Contact
Vasilii Danilin — privacy@rivallenslabs.com — Avenida San Carlos, 7, Bloque 8, 1A, 29630 Benalmádena (Málaga), Spain.