RIVAL PRACTICE LLC ("Rival Practice," "Company," "we," "us," or "our") provides an all-in-one digital growth platform for law firms, tax-resolution firms, and professional-services firms — including a done-for-you website, a client portal, a CRM, an AI receptionist, and marketing and communications tools. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website, purchase a subscription, or use the platform. By using our services, you agree to this Policy.

It's important to understand two different roles:

• For your account and business information, and your use of the platform, we act as the controller of that information and handle it as described in this Policy.
• For the information you and your team enter or upload about your own clients, leads, and contacts (for example, CRM records, documents, appointments, and communications) — "Your Client Data" — you are the controller and we act as your service provider, processing that information on your behalf and under your instructions solely to provide the service. You are responsible for having the necessary rights and permissions to provide Your Client Data to us and for meeting your own privacy obligations to your clients.

• Account & Contact Data: your name, business name, professional designation (e.g., CPA, EA, Attorney), email address, and phone number.
• Billing Data: billing address and subscription details. Payments are processed by a secure third-party payment processor; we do not store raw payment-card numbers on our systems.
• Content You Provide: your brand assets, biographies, website copy, logos and images, AI/voice configuration, and business knowledge you enter to power your website and features.
• Your Client Data: the contacts, leads, documents, appointments, and communications you and your team add to your workspace.
• Communications Data: emails and text messages sent through the platform on your behalf, and — where you use the AI receptionist — call audio, recordings, and transcripts.
• Usage & Technical Data: IP address, browser type, operating system, device information, and interaction timestamps, collected automatically when you use the site or platform.

We use essential cookies and similar technologies to keep you signed in, secure your session, and operate the platform. The platform also lets you add your own analytics or advertising tags to your website; when you do, those tags are governed by the applicable third party's policies and are your responsibility. You can control non-essential cookies through your browser settings.

We use information to:

• provision, deliver, and maintain your website, portal, and workspace;
• process payments and manage subscriptions;
• provide platform features (including AI-powered features described in Section 6);
• send service and administrative messages and, where permitted, marketing communications;
• provide customer support;
• secure and improve the platform; and
• comply with legal, tax, and regulatory obligations.

We do not sell, rent, or trade your personal information.

The platform uses artificial intelligence to provide certain features — for example, transcribing and summarizing calls handled by the AI receptionist, reading and summarizing documents you upload, drafting marketing and follow-up messages for your review, and estimating your visibility to AI answer engines. This processing is performed through secure AI service providers acting on our behalf. AI-generated drafts are provided for your review; you remain responsible for messages you approve and send.

Where you enable the AI receptionist, calls may be recorded and transcribed to provide the service. Recording laws vary by jurisdiction, and some require the consent of all parties to a call. You are responsible for ensuring that calls handled through the platform are recorded in compliance with applicable law, including providing any required notice or obtaining any required consent from callers.

We do not sell, rent, or trade your personal information. We share information only as needed to operate the platform and comply with law, including with:

• Service providers / sub-processors that help us run the platform, by category: cloud hosting and AI processing, payment processing, email delivery, telephony and voice, text messaging, reputation and review data, and market-analysis services. These providers are bound to use the information only to provide services to us. A current list of sub-processor categories is available on request.
• Legal and safety: to comply with law, respond to lawful requests, enforce our agreements, or protect the rights, safety, and property of Rival Practice, our clients, or others.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We send service and account messages that are necessary to operate your workspace (such as sign-in links, billing notices, and security alerts); these cannot be opted out of while your account is active. We may also send periodic updates, including a Status Digest, which you can opt out of at any time from your portal or via the unsubscribe link in the email. Messages you send to your own contacts through the platform are your responsibility as the sender of record; see our Terms & Conditions.

We use industry-standard safeguards — including encryption in transit and at rest, access controls, passwordless sign-in, and per-firm data isolation — to protect information against unauthorized access, alteration, or disclosure. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your information, we will notify you as required by applicable law.

We retain your information for as long as your account is active and as needed to provide the service, and thereafter as required to meet our legal, tax, and regulatory obligations. After a subscription ends, Your Data remains available for export for 30 days, after which it is deleted on a rolling basis. Residual copies may persist in secure backups for a limited period before being overwritten.

You may access, correct, update, export, or request deletion of your personal information from our active systems at any time. You may opt out of non-essential marketing communications. Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act (as amended) — including the right to know, delete, correct, and to opt out of the "sale" or "sharing" of personal information (note: we do not sell or share your personal information for cross-context behavioral advertising) — and we will not discriminate against you for exercising these rights. For Your Client Data, please direct requests to the firm that controls that data. To exercise your rights or ask questions, contact us at support@rivalpractice.com.

The platform is intended for businesses and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

We operate and process information in the United States. If you access the platform from outside the United States, you understand that your information will be processed in the United States.

We may update this Policy from time to time. We will revise the "Effective Date" above and, for material changes, provide additional notice. Your continued use of the platform after an update constitutes acceptance of the revised Policy.

RIVAL PRACTICE LLC

511 E John W Carpenter Frwy, Ste 500, Irving, TX 75062

Email: support@rivalpractice.com