Privacy Policy

1. Introduction

Rivyls LLC (“Rivyls,” “Company,” “we,” “us,” or “our”), a Georgia limited liability company, operates the website located at www.rivyls.com (the “Site”), related mobile applications (the “App”), and all associated content, features, products, and services (collectively, the “Services”). This Privacy Policy (“Policy”) describes how we collect, use, disclose, store, and protect your personal information when you access or use the Services.

This Privacy Policy is supplemental to, and hereby incorporated by reference into, our Terms of Service. By accessing or using the Services, creating an Account, or providing us with your information, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein.

2. Information We Collect

We collect information in several ways: directly from you, automatically when you use the Services, and from third-party sources.

2.1 Information You Provide Directly

Account Registration Information: When you create an Account, we collect your name, email address, username, password, and date of birth (for age verification). You may also provide an optional profile picture, display name, and location.

Profile and League Information: When you create or join leagues, draft teams, participate in contests, or use social features, we collect information about your league preferences, team selections, draft choices, and league-related communications.

Communications: When you contact us for customer support, send feedback, or communicate with other Users through the Services, we collect the content and metadata of those communications.

Survey and Feedback Information: If you respond to surveys, questionnaires, or feedback requests, we collect the information you provide.

2.2 Information Collected Automatically

Device and Usage Information: When you use the Services, we automatically collect information about your device and usage patterns, including your IP address, browser type and version, operating system, device identifiers, screen resolution, referring URLs, pages viewed, time spent on pages, click patterns, and navigation paths.

Location Information: We may collect general location information based on your IP address. We do not collect precise GPS location data unless you expressly consent.

Cookies and Similar Technologies: We use cookies, web beacons, pixels, local storage, and similar tracking technologies. For details, see Section 7 below.

Log Data: Our servers automatically record information when you access the Services, including access times, hardware and software information, crash data, and pages visited.

2.3 Information from Third-Party Sources

Authentication Providers: If you sign in using a third-party authentication service (such as Google or Apple), we receive certain information from that provider, such as your name, email address, and profile picture.

Sports Data Providers: We receive game scores, statistics, schedules, and other sports-related data from third-party providers (such as ESPN) to operate scoring and contest features.

Analytics and Advertising Partners: We may receive information about your interactions with our Services from third-party analytics partners.

3. How We Use Your Information

Providing and Improving the Services: To create and maintain your Account, facilitate league creation and participation, process draft selections, calculate scores, manage leaderboards, and operate the Services.

Authentication and Security: To verify your identity and age, protect Account security, detect and prevent fraud and unauthorized access.

Communications: To send service-related communications including Account verification emails, league notifications, contest updates, security alerts, and support responses. With your consent, promotional communications.

Personalization: To customize content, recommendations, and features based on your preferences and usage.

Analytics and Research: To understand usage patterns, analyze trends, measure effectiveness, and improve the Services.

Legal Compliance: To comply with applicable laws, enforce our Terms, and protect rights, property, and safety.

Consent Logging: To maintain records of your consent to our Terms and Privacy Policy for compliance purposes.

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

Service Providers: We share information with third-party service providers who perform services on our behalf, such as hosting (Vercel, Cloudflare), database management (Supabase), email delivery (Resend), error monitoring (Sentry), and analytics.

Other Users: Certain information is visible to other Users as part of the platform’s functionality, including your username, display name, profile picture, league membership, team selections, draft picks, contest scores, and league standings.

Legal Obligations: We may disclose your information if required by law, regulation, legal process, or governmental request.

Business Transfers: In the event of a merger, acquisition, or asset sale, your information may be transferred as a business asset.

Aggregated or De-Identified Data: We may share aggregated or de-identified information that cannot reasonably be used to identify you.

5. Data Retention

We retain your personal information for as long as your Account is active or as needed to provide you with the Services. We may also retain information for a reasonable period after you close your Account to comply with legal obligations. Consent records are retained for a minimum of seven (7) years.

6. Data Security

We implement commercially reasonable technical, administrative, and organizational security measures designed to protect your personal information, including encryption of data in transit (TLS/SSL) and at rest, secure authentication protocols, access controls, and regular security assessments.

However, no method of transmission over the Internet is completely secure. In the event of a data breach, we will notify you and relevant authorities as required by applicable law.

7. Cookies and Tracking Technologies

7.1 What We Use

We use cookies, web beacons, pixels, and similar technologies to remember your preferences, understand usage, authenticate identity, prevent fraud, and measure effectiveness.

7.2 Types of Cookies

Essential Cookies: Necessary for core functionality such as account authentication, security, and session management. You cannot opt out of these.

Analytics Cookies: Help us understand how Users interact with the Services.

Preference Cookies: Remember your settings and preferences.

7.3 Your Cookie Choices

Most web browsers allow you to manage cookies through browser settings. We honor the Global Privacy Control (“GPC”) signal as a request to opt out of the sale or sharing of personal information.

7.4 Do Not Track

We currently honor the Global Privacy Control signal as described above.

8. Children’s Privacy

The Services are not directed to children under 13. If we learn that we have collected personal information from a child under 13, we will promptly delete that information. To create an Account you must be at least 18 years of age.

9. Your Rights and Choices

9.1 Account Information

You may access, review, and update your Account information at any time by logging into your Account settings.

9.2 Account Deletion

You have the right to request deletion of your Account and personal information through your Account settings or by contacting privacy@rivyls.com.

9.3 Communication Preferences

You may opt out of promotional communications at any time by clicking “unsubscribe” in any promotional email or adjusting your Account settings.

9.4 Data Portability

You may request a copy of your personal information in a structured, commonly used, and machine-readable format by contacting privacy@rivyls.com.

10. State-Specific Privacy Rights

10.1 California Residents (CCPA/CPRA)

If you are a California resident, you have rights under the CCPA/CPRA including the right to know, delete, correct, and opt out of the sale or sharing of your personal information. We do not sell your personal information.

10.2 Virginia Residents (VCDPA)

Virginia residents have rights under the VCDPA including access, correction, deletion, data portability, and opt-out rights. Contact privacy@rivyls.com to exercise your rights.

10.3 Colorado Residents (CPA)

Colorado residents have rights under the CPA including access, correction, deletion, data portability, and opt-out rights. Contact privacy@rivyls.com to exercise your rights.

10.4 Connecticut Residents (CTDPA)

Connecticut residents have rights under the CTDPA including access, correction, deletion, data portability, and opt-out rights. Contact privacy@rivyls.com to exercise your rights.

10.5 Other State Privacy Laws

If you are a resident of a state with applicable privacy legislation, you may have similar rights regarding your personal data. Contact privacy@rivyls.com to exercise any available rights.

10.6 Appeals

If we decline to take action on your privacy rights request, you may appeal by contacting privacy@rivyls.com with the subject line “Privacy Rights Appeal.”

11. International Users

The Services are operated from the United States. By using the Services, you consent to the transfer of your information to the United States. For EEA, UK, or Swiss users, we will ensure appropriate safeguards such as Standard Contractual Clauses.

12. Third-Party Services and Links

The Services may contain links to third-party websites or services. We do not control or assume responsibility for their privacy practices.

13. Sensitive Personal Information

We do not intentionally collect sensitive personal information such as Social Security numbers, financial account numbers, health information, or biometric data, except as minimally necessary for age or identity verification.

14. Automated Decision-Making

We may use automated systems to detect fraudulent activity and enforce fair play policies. If automated decision-making results in an adverse action against your Account, you may request human review by contacting legal@rivyls.com.

15. Data Breach Notification

In the event of a security breach, Rivyls will investigate, notify affected Users and regulatory authorities as required by law, and take steps to mitigate harm.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated Privacy Policy with a revised “Last Updated” date. Your continued use of the Services constitutes acceptance of the updated Policy.

17. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at:

For privacy rights requests, please email privacy@rivyls.com with the subject line “Privacy Rights Request” and include your full name, the email address associated with your Account, and a description of your request.

By using the Services, you acknowledge that you have read, understood, and agree to this Privacy Policy.