Privacy Policy

This Privacy Policy explains how MBRIVAL (“we”, “us”, or “our”) processes personal data when you visit our website, create an account, or use our competitor price intelligence platform (the “Service”).

1. Who is responsible for your data?

The data controller for the Service is MBRIVAL. For privacy-related requests, contact us at [email protected].

2. What data we collect

Depending on how you use the Service, we may process:

• Account data — email address, password hash, user role, and workspace assignment.
• Business data you provide — product catalog information (SKU, name, price, product type), Google Sheets configuration, competitor allowlists/blocklists, and workspace settings.
• Generated analytics data — competitor prices, price-position classifications, run history, and related logs created by the Service.
• Technical data — session cookies, IP address, browser/device information, and server logs needed for security and operation.
• Communications — messages you send us (for example via email or contact forms).

We do not intentionally collect special categories of personal data. Do not submit sensitive personal data through the Service.

3. How we use your data

We use personal and business data to:

• Provide, operate, and maintain the Service;
• Authenticate users and enforce role-based access;
• Run scheduled and on-demand price-tracking jobs;
• Display dashboards, exports, and analytics to authorised users;
• Improve reliability, security, and product quality;
• Respond to support requests and legal obligations.

4. Legal bases (EEA/UK users)

Where applicable under the GDPR, we rely on:

• Contract — to deliver the Service you or your organisation requested;
• Legitimate interests — to secure the platform, prevent abuse, and improve functionality;
• Legal obligation — where we must retain or disclose data by law;
• Consent — where required (for example certain optional communications or cookies, if enabled).

5. Third-party processors

We use trusted providers to run the Service. They process data only on our instructions and for the purposes described here. These may include:

• Hosting and database providers — to store application data securely;
• DataForSEO — to retrieve public Google Shopping product and seller data;
• Google Gemini — to validate product matches during cluster bootstrap (where enabled);
• Google Sheets API — when you connect a spreadsheet for import/export;
• Google reCAPTCHA — to protect the login form in production environments.

Your product and pricing data stays scoped to your workspace. Client users cannot access other organisations' data.

6. International transfers

Some providers may process data outside your country. Where required, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.

7. Retention

We retain account and workspace data for as long as your account is active or as needed to provide the Service. Price history and run logs may be retained according to your workspace configuration and our retention settings, then deleted or anonymised unless law requires longer storage.

8. Security

We apply technical and organisational measures including encrypted connections (HTTPS), hashed passwords, role-based access control, workspace isolation, and access logging. No method of transmission or storage is 100% secure.

9. Your rights

Depending on your location, you may have the right to access, rectify, erase, restrict, or port your personal data, and to object to certain processing. You may also lodge a complaint with your local supervisory authority. To exercise your rights, email [email protected].

10. Cookies and sessions

We use essential session cookies to keep you signed in. We do not use third-party advertising cookies on the Service. You can control cookies through your browser settings; disabling essential cookies may prevent login.

11. Children

The Service is intended for business users and is not directed at children under 16.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. Material changes may also be communicated by email where appropriate.

13. Contact

Questions about this Privacy Policy: [email protected].