Privacy Policy

We collect the following categories of information when you use the Rival RV platform:

• Account Information: Name, email address, phone number, date of birth, profile photo, and mailing address.
• Identity Verification Data: Government-issued photo ID images, selfie photographs for biometric matching, and driving record information.
• Payment Information: Billing address and payment method details (processed and stored by Stripe; we do not store full card numbers).
• Usage Data: Pages visited, search queries, booking history, messaging activity, and interactions with listings.
• Device Information: IP address, browser type, operating system, device identifiers, and screen resolution.
• Location Data: Approximate location based on IP address; precise location only when you grant explicit permission through your device settings.

We use the information we collect for the following purposes:

• Processing bookings, payments, payouts, and refunds
• Verifying user identities to maintain platform safety and trust
• Processing payments securely through Stripe
• Communicating with you about bookings, account activity, policy updates, and customer support
• Improving the Platform, including personalizing your experience and developing new features
• Detecting and preventing fraud, unauthorized access, and other illegal activities
• Complying with legal obligations, including tax reporting and law enforcement requests

Identity verification is performed by our third-party provider, Persona. When you submit identity documents and biometric data for verification, this information is:

• Stored encrypted at rest using AES-256 encryption
• Shared with Persona solely for the purpose of identity verification
• Retained for the duration required for regulatory compliance
• Deleted within 90 days of account closure, plus a 7-year retention period for compliance with financial regulations

Biometric facial matching data is used only for identity verification and is not used for surveillance, advertising, or any other purpose. You may request deletion of your biometric data at any time, subject to regulatory retention requirements.

All payment processing is handled by Stripe, a PCI DSS Level 1 compliant payment processor. Rival RV does not store, process, or have access to your full credit card numbers or bank account details.

We store only the information necessary to display your payment methods (such as the last four digits of your card number and expiration date) and to process refunds or disputes. All payment data is transmitted using TLS 1.3 encryption.

We use the following types of cookies and tracking technologies:

• Essential Cookies: Required for the Platform to function properly. These cannot be disabled.
• Analytics: We use PostHog, a privacy-focused analytics platform, to understand how users interact with the Platform and to identify areas for improvement.

We do not use third-party advertising trackers. We do not sell your browsing data to advertisers. We do not participate in cross-site tracking or ad exchanges.

We use the following third-party services to operate the Platform:

Each third-party provider operates under its own privacy policy. We only share the minimum information necessary for each provider to perform its function.

We never sell your personal data. We share information only in the following circumstances:

• Verification Providers: Identity and driving record data shared with Persona for verification purposes
• Payment Processors: Payment data shared with Stripe for transaction processing
• Insurance Providers: Booking and driver information shared with insurance underwriters to process coverage and claims
• Law Enforcement: Information disclosed when required by law, court order, subpoena, or to protect the safety of our users
• Booking Counterparties: Limited profile information (name, photo, verified status) shared between Hosts and Guests for active bookings

We retain your data for the following periods:

After the retention period expires, data is permanently deleted or anonymized. You may request earlier deletion of your data, subject to regulatory retention requirements.

Depending on your location, you may have the following rights regarding your personal data:

To exercise any of these rights, contact us at privacy@rivalrv.com. We will respond within 30 days (or sooner if required by applicable law).

We implement industry-standard security measures to protect your data:

• All data encrypted at rest (AES-256) and in transit (TLS 1.3)
• SOC 2 Type II compliance is an active goal, with annual third-party security audits
• Regular penetration testing and vulnerability assessments
• Role-based access controls for internal systems
• Multi-factor authentication required for all employee accounts
• Incident response plan with 72-hour breach notification commitment

The Rival RV Platform is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from individuals under 18 years of age. If we become aware that a user is under 18, we will promptly delete their account and all associated data.

If you believe that a minor has provided us with personal information, please contact us immediately at privacy@rivalrv.com.

We may update this Privacy Policy from time to time. We will provide at least 30 days’ notice of any material changes by email and by posting a prominent notice on the Platform. Your continued use of the Platform after the changes take effect constitutes your acceptance of the updated policy.

For privacy-related inquiries, data access requests, or complaints: