Privacy Policy

Last updated 31 July 2026

This policy explains what personal data RivalFeed collects, why, and what you can do about it. The controller is DVB Holdings LLC, a Wyoming limited liability company, 30 N Gould St Ste N, Sheridan, WY 82801, United States (Wyoming Secretary of State filing ID 2025-001660847). Contact us at privacy@rivalfeed.io.

1. What we collect

  • Account data — name, email address and authentication identifiers, handled by our identity provider. We never see or store your password.
  • Billing data — plan, subscription status and billing history. Card details go directly to our payment processor; we do not receive or store them.
  • Service data — the YouTube channels you monitor, your settings, and usage counts against your plan allowance.
  • Technical data — IP address, browser type and timestamps in server logs, plus error reports, used for security, debugging and abuse prevention.

We do not use advertising trackers and we do not sell personal data.

2. Content we process

To produce analysis we retrieve the audio of publicly available videos from channels you select, transcribe it, and analyse the transcript.

  • Audio is transient: it is deleted once transcription completes, and in any event within six hours.
  • Transcripts and analysis are retained as internal derived data and shown only to authenticated users entitled to see them. We do not publish transcripts publicly.
  • Because the same public channel may be monitored by several customers, content is processed once and the resulting analysis is shared across those accounts. Your list of monitored channels is never shared or disclosed to other customers.

3. Why we process it, and on what basis

  • To provide the Service — performance of our contract with you.
  • To take payment and prevent fraud — contract and legitimate interests.
  • To secure and improve the Service — legitimate interests in operating a reliable, abuse-free product.
  • To send service and product email — contract for transactional messages; consent for marketing, withdrawable at any time via the unsubscribe link in every message.
  • To meet legal obligations — for example tax and accounting records.

4. Who we share it with

We use the following categories of processor. Each receives only what it needs, under a data processing agreement.

  • Authentication and account management
  • Payment processing and invoicing
  • Application and database hosting
  • Speech-to-text transcription
  • AI analysis of transcripts
  • Transactional and digest email delivery
  • Error monitoring

A current list of named subprocessors is available on request from privacy@rivalfeed.io. We are established in the United States. Where we process the data of people in the European Economic Area or the United Kingdom, those transfers rely on Standard Contractual Clauses or an equivalent safeguard.

5. How long we keep it

  • Account and service data — for as long as your account is active.
  • After account deletion — erased or anonymised within 30 days, except records we must retain by law (for example invoices, typically seven years).
  • Audio — deleted within six hours of processing.
  • Server logs — typically 30 days.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, export or restrict processing of your personal data, to object to processing based on legitimate interests, and to withdraw consent. Exercise any of these by emailing privacy@rivalfeed.io; we respond within one month. We will not discriminate against you for exercising them.

If you are in the EEA or UK and believe we have handled your data improperly, you may lodge a complaint with the data protection supervisory authority in your country of residence or workplace.

7. Cookies

We use cookies that are strictly necessary to operate the Service: keeping you signed in, protecting against cross-site request forgery, and remembering your interface preferences. We do not use advertising or cross-site tracking cookies.

8. Security

Data is encrypted in transit. Access to production systems is restricted and authenticated. No system is perfectly secure, but we will notify you and any relevant authority of a personal data breach where the law requires it.

9. Children

The Service is not directed at children and we do not knowingly collect data from anyone under 18. If you believe a child has provided us personal data, contact us and we will delete it.

10. Content owners

If you own a YouTube channel and do not want it processed, email support@rivalfeed.io and we will add it to an exclusion list. Copyright concerns can be sent to dmca@rivalfeed.io.

11. Changes

We may update this policy. Material changes will be notified by email or in-product before they take effect.