Privacy and cookies

Olena Holub, operating Risetive from Ireland, is the data controller for the personal data processed to run this service. The Risetive team handles requests on her behalf; authorised technical staff carry out the necessary account and data operations.

For privacy requests, email [email protected], call +353 830091396 or write to 2 Hume Street, Dublin 2, Ireland. You do not need to find or contact an individual developer.

Public research pages and the independent website diagnosis tool remain available. Website diagnosis processes the address you submit and public website material; research and diagnosis may use AI service providers.

Account and session information: Clerk handles sign-in identifiers, email addresses and other profile information you provide through sign-in, together with authentication and session data. Our application uses your sign-in state and user identifier to control account access.

Website and security information: requests expose technical information such as an IP address, requested URL, browser details and errors to the infrastructure serving them. We use Cloudflare Web Analytics for aggregate cookie-free page usage and performance measurements.

Product analytics information: we use PostHog, hosted in the European Union, to record page views and page interactions such as clicks, sign-in prompts, saving and removing items, and idea searches. PostHog receives the page address and title, the referring page, the element clicked, device and browser details, and your IP address, from which it derives an approximate region. A randomly generated visitor identifier lets us count repeat visits from the same browser. When you are signed in, we link these events to your account's internal identifier so we can understand how accounts use the product. The text you enter into the idea search is recorded with the search and its result so we can improve how searches are handled. We never send your email address or name to PostHog, do not record sessions, and do not use this data for cross-site or advertising tracking.

Sites you submit: when you submit a website to Risetive, we store your account's internal identifier, the website's address and name, and when you submitted it. We use them to review the website with the same rules as every other listing, to limit submissions to 10 a day and to save the product to your Saved list if it is listed. A listed website becomes part of the public product corpus; who submitted it is never shown.

Support information: if you contact us, we receive the details and information you choose to provide. Share only what is needed for the request. We do not currently collect card details or operate checkout.

Public research data: our product corpus contains publicly available information about products, websites, niches and their growth evidence. It is separate from user account data. Public material may sometimes identify an individual operating a product; those individuals can also contact us about their personal data.

We process account information and the inputs you submit to provide the software service you request and manage your account. The legal basis is performance of that service agreement, or steps you ask us to take before entering it.

We rely on legitimate interests to protect the service from abuse, diagnose faults, understand cookie-free aggregate performance and maintain useful public product research, while considering the rights and reasonable expectations of affected people. You may object to processing based on legitimate interests.

We rely on legitimate interests to use PostHog product analytics to understand how pages are used and improve the product. You may object to this processing by contacting us, and you can block it with browser privacy settings or a content blocker without affecting product access.

We do not currently connect to users' Google Search Console or analytics accounts. The project's own search-performance reporting is not a user-authorised integration. Your account data is not added to the public product corpus.

Clerk provides identity and session services. Render hosts the web service and PostgreSQL database in Frankfurt.

Stripe handles Risetive Pro payments and, through Link, sells it as merchant of record; we keep your plan, its end date and Stripe's customer and subscription references, not your card details.

Resend delivers Radar's weekly email. Radar tracks the sites you claim or submit and whatever you choose to track, and each Monday with something new it tells a Risetive Pro account which new competitors it found and a free account how many. Resend receives your email address and the email's contents. We read the address from Clerk when sending and do not store it. Every email has an unsubscribe link, and the Radar page has a switch for it.

Cloudflare supplies DNS and Web Analytics. PostHog supplies product analytics from its European Union region. The interface font is served from Risetive's own servers, so no font request goes to a third party. Necessary technical request information is processed when using these services.

Authorised people supporting Risetive may access information needed to respond to a request or maintain the service. Information may also be disclosed where required by law or necessary to establish, exercise or defend legal claims.

AI service providers process public website material for research, website diagnosis and signed-in Agent requests. Other MCP tools read existing public data without starting collection or recalculation.

Clerk uses authentication and session storage when sign-in is activated. These mechanisms are needed to keep an account signed in and protect access. The Clerk interface is loaded for signed-in users or when you explicitly open sign-in or sign-up. Authentication infrastructure may also set security cookies when its resources are requested, before you sign in.

Cloudflare describes Web Analytics as cookie-free and says it does not use browser storage or fingerprinting to identify visitors. A cookie-free analytics service does not mean all infrastructure requests are free of technical information.

PostHog stores its randomly generated visitor identifier in your browser's local storage, not in a cookie, so that repeat visits from the same browser are counted once. It sets no cookies. Clearing this site's browser storage resets the identifier.

Records PostHog has already received are governed by its retention and deletion arrangements.

Account information is used while your account remains active and is reviewed for deletion when you close it or exercise your rights. Support correspondence is kept only as needed to resolve the request and meet any applicable legal obligations or claims. Retention depends on the type of record, its purpose and the obligations that apply.

Infrastructure logs, provider records and backup copies have separate retention arrangements and may not disappear when a page session ends.

Although our application database is hosted in Frankfurt, providers including Google and authorised support may process information in other countries, including outside the EEA. Such transfers are subject to applicable GDPR requirements. The applicable mechanism depends on the recipient and destination, such as an adequacy decision or appropriate safeguards including standard contractual clauses.

You may request the relevant recipient, destination, retention information and applicable transfer safeguards by emailing [email protected], calling +353 830091396 or writing to 2 Hume Street, Dublin 2, Ireland. We will explain the arrangements relevant to your data. A Frankfurt database does not mean all processing stays in the EEA.

Subject to the GDPR conditions that apply, you may request access, correction, erasure, restriction and portability of your personal data, object to processing based on legitimate interests, and withdraw consent where processing relies on it. Erasure is not an unconditional right to remove every record, for example where retention is legally required or needed for legal claims.

Submit your request by emailing [email protected], calling +353 830091396 or writing to 2 Hume Street, Dublin 2, Ireland. We will reply within 3 working days and delete personal data eligible for erasure within 7 working days of receiving your request. Working days are Monday to Friday, excluding Irish public holidays. These are our service commitments, not a statement of the GDPR's standard response period.

We may need proportionate information to confirm your identity before releasing or deleting account data. We will ask promptly, explain what is needed and keep you informed. If a record must be retained, or provider or backup handling affects completion, we will explain the reason, scope and next steps rather than claim deletion is complete.

Under the GDPR, requests must be handled without undue delay and normally within one month. Where the law permits an extension for complexity or the number of requests, we must explain it within the first month; the extension can be up to two further months. These statutory rules are not a routine replacement for our faster service commitments.

Privacy requests are handled by people, not an automated deletion portal. We do not normally charge for a rights request. If we cannot act on a request, we will explain why and your complaint and judicial remedy options.

You can complain to the Irish Data Protection Commission or another competent supervisory authority. Visit dataprotection.ie for the Irish authority's current contact and complaint information.

We will update this notice when the service or its data processing changes and show the revision date. Material changes will be communicated as required.