Privacy Policy

Effective Date: April 17, 2026

This Privacy Policy explains how RESTYN INC d/b/a RIVALMARK, a Maryland corporation with its principal place of business in Owings Mills, Maryland, USA ("RivalMark," "we," "us," or "our"), collects, uses, discloses, and otherwise processes personal information in connection with rivalmark.ai and all related websites, dashboards, reports, APIs, models, applications, software, communications, and services (collectively, the "Service").

This Privacy Policy is incorporated by reference into our End User License Agreement and Terms of Use (the "Terms"). Capitalized terms not defined here have the meanings given in the Terms.

By accessing or using the Service, you acknowledge this Privacy Policy. This Privacy Policy is intended to provide transparency regarding our data practices; it is not a warranty, and nothing in it limits any disclaimers, limitations, or separate contractual terms in the Terms or in another written agreement with us.

1. Scope

This Privacy Policy applies to personal information we process about:

  1. visitors to our websites and online properties;
  2. individuals who register for, access, or use the Service;
  3. personnel of our customers, vendors, partners, and prospects;
  4. individuals who communicate with us, request a demo, subscribe to updates, or otherwise interact with us; and
  5. individuals whose professional, business, or publicly available information we collect, receive, or process in connection with creating, enhancing, validating, or delivering competitive-intelligence reports and related outputs.

This Privacy Policy does not apply to:

  1. third-party websites, services, or applications that are not owned or controlled by RivalMark;
  2. information processed solely on behalf of an enterprise customer where we act only as that customer's processor, service provider, or contractor and the customer controls the purposes and means of processing; or
  3. information subject to a separate written privacy notice, data processing addendum, or other agreement that expressly supersedes this Privacy Policy.

If you interact with RivalMark through an organization or customer account, that organization may separately control certain processing activities. In those cases, you should also review the organization's privacy notices and policies.

2. Categories of Personal Information We Collect

Depending on how you interact with us, we may collect the following categories of personal information.

2.1 Identifiers and business contact information

This may include your name, business email address, telephone number, company name, job title, department, billing and mailing address, username, account identifier, and similar contact or registration details.

2.2 Account, authentication, and administrative information

This may include login credentials, password hashes, single sign-on identifiers, account preferences, role/permission settings, security questions or tokens, and administrative metadata associated with your account.

2.3 Commercial, transaction, and billing information

This may include subscription plan details, order history, invoice records, payment status, billing contacts, tax information, and limited payment-method metadata. Payment card information is typically collected and processed by our payment processors on our behalf rather than stored by us in full.

2.4 Customer Content, prompts, uploads, and report-request data

This may include queries, prompts, instructions, URLs, uploaded documents, notes, lists, search parameters, report requests, source materials, attachments, chat messages, annotations, support submissions, and other content you or your organization submit to the Service.

2.5 Output and related metadata

This may include generated reports, summaries, rankings, scores, recommendations, alerts, comparisons, citations, explanations, and related logs or metadata concerning when, how, and by whom Output was requested, generated, accessed, exported, or shared.

2.6 Public-source and third-party-source information

Because the Service provides AI-generated competitive-intelligence reports, we may collect, receive, license, or infer professional, business, or publicly available information from third-party and public sources, such as company websites, product pages, app stores, directories, news sources, press releases, filings, social-media pages, review sites, data vendors, business partners, and integrations you authorize.

2.7 Device, usage, log, and network information

This may include IP address, approximate location derived from IP, browser type, operating system, device identifiers, language settings, referral URLs, pages viewed, features used, clickstream data, timestamps, crash data, API call metadata, and security or fraud-prevention logs.

2.8 Communications and support information

This may include the contents of emails, support tickets, chat messages, demo requests, meeting notes, survey responses, call metadata, and other information you provide when communicating with us.

2.9 Inferences and derived information

We may generate inferences, scores, classifications, tags, summaries, segments, relationship maps, or other derived information from the data described above, including inferences about companies, products, markets, customer intent, or user preferences.

2.10 Sensitive information

We ask that you not submit sensitive personal information through the Service unless it is strictly necessary for a specific feature we expressly provide and you are legally authorized to do so. This includes, for example, government ID numbers, precise geolocation, financial account credentials, payment card numbers, protected health information, children's data, biometric identifiers, and other highly sensitive or regulated data. If you nonetheless provide such information, we may process it as reasonably necessary to provide the Service, secure the Service, enforce our Terms, comply with law, or protect rights, safety, and systems, subject to applicable law and any separate written agreement.

3. Sources of Personal Information

We may collect personal information from the following sources:

  1. directly from you;
  2. from your employer, colleagues, or organization if you use the Service through a business account;
  3. automatically from your browser, device, or use of the Service;
  4. from public and third-party sources used to build or validate reports;
  5. from service providers, analytics providers, payment processors, authentication providers, and security vendors;
  6. from integrations, APIs, and third-party accounts you connect or authorize; and
  7. from affiliates, partners, resellers, and other business contacts.

4. How We Use Personal Information

We may collect, use, disclose, store, analyze, combine, and otherwise process personal information for the following purposes:

4.1 To provide and operate the Service

Including creating accounts, authenticating users, enabling access, generating reports, returning Output, maintaining customer workspaces, managing subscriptions, processing payments, and providing requested features and functionality.

4.2 To create, generate, enhance, and deliver competitive-intelligence reports

Including collecting, normalizing, analyzing, summarizing, comparing, ranking, scoring, and synthesizing source information and Customer Content into reports, alerts, and other outputs.

4.3 To support, maintain, and improve the Service

Including debugging, testing, troubleshooting, quality assurance, service analytics, feature development, performance monitoring, reliability improvements, product research, and user-experience optimization.

4.4 To develop and improve AI, machine-learning, and related systems

Except where prohibited by law or by an express written agreement with you, we may use personal information, Customer Content, Output, and related metadata to develop, train, tune, validate, evaluate, benchmark, monitor, and improve our models, algorithms, classifiers, taxonomies, prompts, retrieval systems, workflows, and related technologies.

4.5 To secure the Service and enforce our rights

Including detecting, preventing, investigating, and responding to fraud, abuse, misuse, unauthorized access, policy violations, intellectual-property claims, legal claims, security incidents, and other harmful or unlawful activity.

4.6 To communicate with you

Including sending transactional messages, service notices, billing notices, security alerts, changes to our policies or Terms, support communications, and, where permitted by law, promotional and marketing communications.

4.7 To comply with law and protect rights

Including satisfying legal, regulatory, tax, accounting, audit, reporting, recordkeeping, law-enforcement, and compliance obligations; responding to legal process; and protecting our rights, property, safety, personnel, customers, users, partners, and systems.

4.8 For corporate and business transactions

Including due diligence, financing, merger, acquisition, asset sale, reorganization, bankruptcy, or similar corporate transaction, and planning for or completing such transaction.

4.9 To create de-identified or aggregate data

We may de-identify or aggregate personal information and use that data for any lawful purpose, including analytics, benchmarking, security, research, product development, and commercial purposes. We may also disclose de-identified or aggregate data to third parties. Where we represent that data is de-identified, we will not attempt to re-identify it except as permitted by law.

5. Legal Bases for Processing

If you are located in a jurisdiction that requires a legal basis for processing personal information, we may rely on one or more of the following legal bases, as applicable:

  1. performance of a contract or taking steps at your request before entering into a contract;
  2. our legitimate interests, including operating, securing, improving, and commercializing the Service, except where overridden by your rights;
  3. compliance with legal obligations;
  4. your consent, where we specifically request it; and
  5. protection of vital interests, rights, safety, and prevention of fraud or abuse.

6. AI and Automated Processing

The Service uses automated systems, including artificial intelligence and machine-learning systems, to ingest, classify, retrieve, compare, score, summarize, and generate reports and other outputs.

You should assume that prompts, uploads, and other interactions with the Service may be processed by automated systems and may, in some cases, be reviewed by our personnel or service providers for support, safety, abuse prevention, compliance, quality assurance, and product improvement.

We do not intend the Service to be used for solely automated decisions about natural persons that produce legal or similarly significant effects in contexts such as employment, credit, housing, insurance, education, healthcare, or other high-risk use cases. You are prohibited by our Terms from using the Service in those ways.

7. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients, subject to applicable law.

7.1 Service providers and subprocessors

We may disclose personal information to vendors and service providers that help us host, operate, secure, support, analyze, improve, market, and provide the Service, including cloud hosting providers, model providers, payment processors, analytics providers, communications providers, CRM vendors, identity providers, support tools, and security vendors.

7.2 Affiliates and related entities

We may disclose personal information to our current or future affiliates, subsidiaries, parents, or entities under common control for the purposes described in this Privacy Policy.

7.3 Customers and authorized users

Where the Service is used through a business account, personal information may be visible to, controlled by, or disclosed to the relevant customer account owner, administrators, billing contacts, or other authorized users.

7.4 Business partners, resellers, and integrations

We may disclose personal information to implementation partners, resellers, referral partners, integration partners, or third parties you direct us to interact with.

7.5 Professional advisers and transaction counterparties

We may disclose personal information to auditors, insurers, financing sources, legal counsel, accountants, investors, acquirers, merger partners, and others involved in actual or proposed business transactions.

7.6 Government authorities and legal process

We may disclose personal information to courts, regulators, law-enforcement authorities, government agencies, or other third parties when we believe disclosure is necessary or appropriate to comply with law, enforce our rights, protect safety or security, or respond to legal process.

7.7 Public or third-party sources at your direction

If you instruct the Service to connect with or analyze a third-party source, integration, or website, information may be transmitted to or received from that source as necessary to perform your request.

7.8 De-identified and aggregate disclosures

We may disclose de-identified or aggregate information for any lawful purpose.

7.9 With your consent or at your direction

We may disclose personal information for additional purposes when you request, direct, or authorize us to do so.

7.10 Sale, sharing, and targeted advertising

We do not sell personal information for money. We also do not knowingly disclose personal information for cross-context behavioral advertising or targeted advertising except to the extent described through our cookie technologies, a just-in-time notice, or another supplemental disclosure. Certain cookie-based or analytics-related disclosures may be characterized as a "sale," "share," or targeted advertising under some state privacy laws. Where required by law, we offer methods to opt out of those disclosures.

8. Cookies and Similar Technologies

We and our service providers may use cookies, pixels, local storage, SDKs, log files, and similar technologies to:

  1. operate and secure the Service;
  2. authenticate users and maintain sessions;
  3. remember preferences and settings;
  4. measure usage, performance, and engagement;
  5. understand the effectiveness of communications and campaigns; and
  6. improve the Service and our websites.

You may be able to control cookies through your browser settings or any cookie preferences tool we make available. Blocking some technologies may affect the availability or functionality of certain features.

To the extent required by applicable law, we will obtain consent before using non-essential cookies or similar technologies. We may also process legally recognized opt-out signals where required by applicable law and where relevant to the data practices at issue.

9. Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

  1. provide and maintain the Service;
  2. complete transactions and fulfill contractual commitments;
  3. maintain business and financial records;
  4. investigate incidents and enforce the Terms;
  5. comply with legal, tax, accounting, or reporting obligations; and
  6. preserve evidence and defend or pursue legal claims.

Retention periods vary depending on the nature of the information, the sensitivity of the data, the purpose for which it was collected, whether the data is needed for security or dispute-resolution purposes, and our legal obligations. We may retain backup copies, logs, suppression lists, deletion records, and de-identified or aggregate information for longer periods.

10. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, acquisition, disclosure, alteration, or destruction. However, no method of transmission over the Internet, no cloud environment, and no security control is completely secure. We do not guarantee absolute security.

You are responsible for maintaining the confidentiality of your credentials and for promptly notifying us of suspected unauthorized access or security incidents involving your account.

11. International Data Transfers

We may process personal information in the United States and other jurisdictions where we or our service providers operate. Those jurisdictions may have data-protection laws that are different from those of your home jurisdiction.

Where required by applicable law, we will implement appropriate safeguards for international transfers of personal information.

12. Your Rights and Choices

Depending on where you live and subject to applicable exceptions, you may have some or all of the following rights regarding your personal information:

  1. to know, confirm, or access the personal information we process about you;
  2. to correct inaccuracies in your personal information;
  3. to delete your personal information;
  4. to obtain a copy of certain personal information in a portable format;
  5. to opt out of certain sales, sharing, targeted advertising, profiling, or other processing;
  6. to withdraw consent where our processing is based on consent;
  7. to appeal a denial of your request; and
  8. to be free from unlawful discrimination for exercising applicable privacy rights.

You may also have choices regarding marketing communications, cookies, and account settings.

12.1 How to exercise rights

You may submit privacy requests by contacting us at support@rivalmark.ai. We may ask you for information necessary to verify your identity and authority before processing certain requests. We may deny or limit a request where permitted by law, including where we cannot verify identity, an exception applies, the request is manifestly unfounded or excessive, compliance would reveal protected information or trade secrets, or we are otherwise permitted or required to retain or continue processing the information.

12.2 Authorized agents

Where permitted by law, you may designate an authorized agent to submit a request on your behalf. We may require proof of the agent's authority and may also require you to verify your identity directly with us.

12.3 Appeals

If we deny your request, you may appeal by replying to our decision notice or by emailing notices@rivalmark.ai with the subject line "Privacy Rights Appeal." If we deny your appeal, we will provide any additional complaint or escalation mechanism required by applicable law.

12.4 Marketing communications

You may unsubscribe from promotional emails by using the unsubscribe link in the email or by contacting us. Even if you opt out of marketing communications, we may still send you transactional or service-related communications.

12.5 Accounts controlled by an organization

If your personal information is processed by us solely on behalf of one of our customers or another organization controlling the account, you should direct your request to that organization first. We may forward your request to that organization or advise you to do so, as appropriate.

13. Public-Source Professional Information and Report Correction Requests

Because the Service is designed to generate competitive-intelligence reports, we may process professional or business-related information about individuals obtained from public or third-party sources. If you believe that information about you in our systems is inaccurate, outdated, unlawfully processed, or otherwise requires review, you may contact us at support@rivalmark.ai.

Subject to applicable law, context, and our role in the relevant processing activity, we may investigate and take steps we deem appropriate, including correction, suppression, deletion, or limiting future processing. We may request information necessary to verify your identity and evaluate your request.

14. Children's Privacy

The Service is not directed to children. We do not knowingly collect personal information directly from children through the Service. If you believe a child has provided personal information to us, contact us at notices@rivalmark.ai and we will take appropriate steps consistent with applicable law.

15. Third-Party Sites and Services

The Service may contain links to third-party websites, products, services, and integrations. We are not responsible for the privacy, security, or data practices of those third parties. Your interactions with third parties are governed by their own terms and policies.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective Date" above. Material changes will become effective as stated in the updated Privacy Policy or other notice we provide. Where required by applicable law, we will provide additional notice or obtain consent before applying a material change to previously collected personal information in a way that is materially different from the disclosures in effect when the information was collected.

17. Contact Us

RESTYN INC d/b/a RIVALMARK 300 Red Brook Blvd Suite 220 Owings Mills, Maryland 21117

RivalMark

RESTYN INC d/b/a RIVALMARK · 300 Red Brook Blvd, Suite 220, Owings Mills, MD 21117 · © 2026 RivalMark. All rights reserved.