Privacy Policy
This Privacy Policy describes the processing of Personal Data carried out by Riverbound Studios LLC ("Riverbound", "we") in connection with the Reveal Metrics web application, API and MCP server at revealmetrics.io (the "Service"), in accordance with Regulation (EU) 2016/679 (the "GDPR"), the United Kingdom GDPR, and applicable state privacy laws of the United States of America.
1.Data Controller
The Data Controller is Riverbound Studios LLC, a limited liability company organised under the laws of the State of Wyoming, United States of America, with its registered office at 30 N Gould Street, STE R, Sheridan, Wyoming 82801, United States of America. All communications regarding this Policy may be addressed to contact@riverbound.net.
2.Personal Data processed
Riverbound processes the following categories of Personal Data: (i) account data provided at registration or in the account settings, namely name, e-mail address, password (stored only as a salted hash), profile picture, workspace name and the User's role in it, where the User signs up with Google or GitHub, the name, e-mail address and profile picture that the provider shares for that purpose, (ii) billing data for paid plans, namely the plan, subscription status, invoices and payment history, card details are entered on pages served by Stripe and never reach Riverbound's servers, (iii) usage and security data collected automatically, namely the Internet Protocol (IP) address, user agent, timestamps and request paths recorded in server logs and in short-lived rate-limit counters, and the country derived from the IP address of the User's latest signed-in request, which is kept with the account and replaced on each visit, (iv) the choices the User saves in the Service, such as watchlists, comparisons, filters, display preferences and notification settings, (v) support requests and any other correspondence sent to Riverbound, (vi) where the User connects a Meta ad account, the access token issued by Meta and the campaigns, ads and performance metrics of that ad account, used solely to show the User their own analytics, the User may disconnect the ad account at any time, after which the synced data is deleted, (vii) delivery and bounce information returned by the electronic-mail provider for messages sent to the User, (viii) usage data collected automatically through the analytics service described in the section on cookies, namely the pages viewed, the features used, clicks and other interactions with the interface together with the text of the elements interacted with, the searches and filters applied, the brands opened, the reason chosen in the cancellation survey, the referring page, the browser, operating system, device type, screen size and language, and the IP address, from which an approximate location (country and city) is derived, where the User is signed in, this usage data is linked to the User's account (name, e-mail address, role and plan), (ix) session recordings, namely a replay of what the User's screen showed and how the User moved, clicked, scrolled and typed while using the Service, including any Personal Data displayed on screen at the time, such as the names and e-mail addresses of workspace members, and the text typed into fields other than password fields, which are always masked, and (x) technical error reports generated when the Service fails in the User's browser, namely the error message, the code location and the page and browser in which the error occurred, and (xi) where the User creates an API key or connects an MCP client, the key's name, a hashed form of the key, the name of the connected client, the workspace member who created or connected it, when it was last used, the credits it has drawn in the current week, and the request logs attributed to that credential, which Riverbound uses to enforce the plan's quotas and to detect automated extraction, and (xii) where the User accepts advertising cookies, the advertising data described in the section on cookies, namely the browser and click identifiers set by the Meta and Reddit pixels, the advertising click identifier in the address of the page the User arrived on, and the IP address and user agent of the request with which the User signs up or starts a checkout. Where the User reaches the Service through a third-party AI assistant, the prompts the User writes and the data the assistant retrieves are also processed by that assistant's provider under the User's agreement with it, Riverbound receives only the requests the assistant sends.
Brand Data shown in the Service concerns businesses, not Users. It is compiled from the public Meta Ad Library, from the businesses' public websites and from publicly available benchmark research. It may incidentally include the name or likeness of an individual who appears in a public advertisement or who trades under their own name. Riverbound processes such data on the basis of its legitimate interest in providing market research (Article 6(1)(f) GDPR) and responds to requests from affected individuals at the contact address in this Policy.
3.Google user data
Where the User signs in with Google, Riverbound requests only the basic sign-in scopes (openid, email and profile). From Google it receives the User's name, e-mail address, profile picture and whether Google has verified that address, together with the access and refresh tokens that Google issues for the sign-in. Riverbound uses this data solely to create the User's account, to sign the User in and to confirm the e-mail address, and does not use the tokens to access any other Google data. The name and e-mail address are stored as account data and the tokens are stored with the User's workspace, both in the Service's database hosted by netcup GmbH in Germany, the profile picture is copied once, when the account is created, to the file storage operated by Backblaze, Inc. in the European Union, and the User may replace or remove it at any time in the account settings. The name, e-mail address and profile picture are processed only as described in this Policy for account data, the tokens are never shared with any third party. Google user data is never sold, is not used for advertising, and is not used to develop, improve or train generalised artificial intelligence or machine learning models. It is deleted together with the account and its workspace, and the User may revoke Riverbound's access at any time from the third-party connections of their Google Account. Riverbound's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
4.Recipients and processors
Personal Data is processed by the following sub-processors acting on behalf of Riverbound under their respective data processing terms: (a) netcup GmbH (Germany), which hosts the Service and its database, (b) Backblaze, Inc. (United States), which stores files such as ad creatives and profile pictures in its European Union region, (c) Stripe, Inc. (United States), which processes payments and holds card details, (d) Resend, Inc. (United States), which delivers electronic mail on Riverbound's behalf, (e) Anthropic, PBC (United States), which generates analyses of Brand Data and receives no account data, (f) Google LLC (United States), which provides business electronic mail via Google Workspace and, where the User chooses it, sign-in with Google, (g) GitHub, Inc. (United States), where the User chooses sign-in with GitHub, (h) Meta Platforms, Inc. and Meta Platforms Ireland Limited, where the User connects a Meta ad account, and (i) PostHog, Inc. (United States), which provides the product analytics, session replay and error reporting described in this Policy and stores that data on Amazon Web Services in the United States. Each sub-processor publishes its own list of further sub-processors and processing terms on its respective website. Where the User accepts advertising cookies, the advertising data described in the section on cookies is also disclosed to Meta Platforms Ireland Limited (and, for Users outside the European Economic Area, Meta Platforms, Inc.) and to Reddit, Inc., to measure and improve Riverbound's advertising on their platforms. For the collection and transmission of that data Riverbound and each platform act as joint controllers, and each platform then processes it as an independent controller under its own terms and privacy policy. Riverbound does not sell Personal Data, shares it for advertising only as just described, and does not carry out automated decision-making that produces legal or similarly significant effects.
5.Purposes and legal bases
Riverbound processes Personal Data to create and operate the User's account and workspace and to provide the Service the User has subscribed to, including billing, transactional electronic mail such as verification codes, receipts and the notifications the User has enabled, and answers to support requests, to keep the Service secure, to enforce plan limits and to detect and investigate abuse, including automated extraction of Brand Data, to understand how the Service is used and to improve it, including by analysing usage data, reviewing session recordings and diagnosing errors, to comply with legal obligations, in particular tax and accounting law, and, only where the User has opted in through the notification settings, to send product news, and, only where the User has accepted advertising cookies, to measure and improve Riverbound's advertising on Meta and Reddit. Where the GDPR or the United Kingdom GDPR applies, the legal bases are the performance of the contract with the User (Article 6(1)(b)), compliance with legal obligations (Article 6(1)(c)), Riverbound's legitimate interests in securing and improving the Service, in understanding how it is used, including through usage analytics and session recordings, and in preventing abuse (Article 6(1)(f)), to which the User may object at any time as described in the section on the rights of the data subject, and, for product news and advertising measurement, the User's consent (Article 6(1)(a)), which may be withdrawn at any time in the notification settings, through the Cookie settings link at the foot of the public pages, or by writing to contact@riverbound.net.
7.International transfers
Riverbound is established in the United States. The Service and its database are hosted in Germany and files are stored in the European Union, several of the sub-processors identified above are established in the United States, and usage data, session recordings and error reports are stored by PostHog, Inc. in the United States. Where Personal Data originating in the European Economic Area, the United Kingdom or Switzerland is transferred to the United States, transfers rely on the data transfer mechanisms provided by the relevant sub-processors in their data processing terms, which typically include the Standard Contractual Clauses adopted by the European Commission and, where applicable, the United Kingdom International Data Transfer Addendum. PostHog, Inc. has certified its adherence to the EU-U.S. Data Privacy Framework, the UK Extension to it and the Swiss-U.S. Data Privacy Framework, and transfers to PostHog rely on that certification and on the Standard Contractual Clauses included in its data processing agreement. Advertising data disclosed to Meta and Reddit where the User accepts advertising cookies may be transferred to the United States under the transfer mechanisms each platform describes in its own terms.
8.Retention
Account data is retained for as long as the account exists. When the User closes the account, or when Riverbound terminates it, the account and its workspace data are deleted, a minimal archival record (e-mail address, name and role) is kept for a reasonable period to honour the deletion, to prevent abuse, and to establish, exercise or defend legal claims. Billing records are retained for as long as tax and accounting law requires. Server logs and rate-limit counters are kept for a short rolling period. Usage data and error reports held by PostHog are retained for up to seven years, and session recordings for no more than ninety days, after which they are deleted, they are not deleted automatically when the account is closed, but Riverbound deletes them on request. Database backups are kept for a limited period and overwritten in rotation. The advertising identifiers kept with an account are replaced at each checkout, and deleted when the User refuses advertising cookies before a checkout, when the account is closed, or earlier on request. Data received by Meta and Reddit is retained under their own policies. Correspondence received at contact@riverbound.net or any other Riverbound contact address is retained for the duration of the business relationship with the correspondent and for a reasonable archival period thereafter, in line with ordinary business record-keeping and the establishment, exercise or defence of legal claims. Users may request earlier deletion at any time by writing to contact@riverbound.net.
9.Rights of the data subject
Subject to the conditions and limitations set forth by applicable law, Riverbound voluntarily extends the following data protection rights to all Users of the Service, regardless of jurisdiction: access to Personal Data, rectification of inaccurate or incomplete Personal Data, erasure, restriction of processing, data portability, objection to processing based on legitimate interests, including usage analytics and session recordings, withdrawal of consent where processing is based on consent, and opt out of any sale, sharing or use of Personal Data for targeted advertising. Riverbound does not sell Personal Data and shares it for advertising only where the User has accepted advertising cookies, a choice the User may withdraw at any time through the Cookie settings link at the foot of the public pages. Requests may be submitted to contact@riverbound.net and will be answered within the timeframe required by applicable law. Users in the European Economic Area, the United Kingdom or Switzerland additionally have the right to lodge a complaint with their national data protection authority. Users may also update their profile, change their e-mail address, manage notification settings and close their account directly in the account settings of the Service.
10.Security
The Service is served exclusively over Transport Layer Security. Passwords are stored as salted hashes, new accounts, changes of e-mail address and password resets are confirmed with a code sent to the User's e-mail address, and administrative access to the Service's infrastructure is restricted. Riverbound relies on the security measures implemented by the sub-processors identified above for the layers they operate. In the event of a personal data breach affecting the rights and freedoms of Users, Riverbound will notify the competent supervisory authority and, where required by applicable law, the affected Users without undue delay.
11.Children
The Service is not directed to children. Riverbound does not knowingly process Personal Data of children under thirteen (13), within the meaning of the United States Children's Online Privacy Protection Act, or of children under sixteen (16), within the meaning of Article 8 of the GDPR. A parent or guardian who believes that a child has provided Personal Data to Riverbound may contact contact@riverbound.net so that the data can be deleted.
12.Changes to this Policy
Riverbound may amend this Policy at any time. The effective date indicated at the top of this page reflects the most recent revision.
13.Contact
Riverbound Studios LLC, 30 N Gould Street, STE R, Sheridan, Wyoming 82801, United States of America. Electronic mail: contact@riverbound.net. Telephone: +1 (307) 218-7803.