Privacy Policy
1. Introduction
Riveloper ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we access, process, use, protect, and, when necessary, retain information through our website and associated services.
This notice covers our website and project assessment for U.S. visitors and businesses. We collect information you submit and limited technical and analytics information about website use. We do not sell personal information or use your project briefs or assessments for behavioral advertising.
2. Information We Access or Process
Depending on how you interact with our website or services, the following information may be processed:
- Authentication information: Basic identity information provided by Google or another authentication provider when you choose to sign in.
- Communications: Your name, organization, email address, phone number, message, and submission time. The contact form requires an email address and U.S. phone number so we can respond.
- Project assessment information: Your project brief, service-fit result, generated questions, answers, preliminary analysis, contact details, assessment reference, and generated assessment document. Assessment sessions also store the connection IP address and processing timestamps.
- Technical information: IP addresses, browser details, device information, request timestamps, and diagnostic information that may be processed by web hosting, security, or infrastructure providers.
- Session information: Essential cookies, authentication tokens, or temporary session identifiers needed to operate and secure website features.
We do not collect this information for behavioral advertising or unrelated marketing purposes.
3. Google Sign-In and Google User Data
Certain Riveloper services may allow users to authenticate using Google Sign-In. When you choose to sign in with Google, we may receive:
- Your Google account name.
- Your email address.
- Your profile picture.
- A unique Google account identifier.
This information is used only to verify your identity, establish and maintain authenticated sessions, and provide access to requested features.
Basic Google Sign-In does not give us access to your Google password, Gmail messages, contacts, Google Drive files, or other unrelated Google account information.
We do not sell Google user data, use it for targeted advertising, or transfer it to data brokers. Authentication information may be processed in application memory, secure session mechanisms, or authentication infrastructure. We do not intentionally retain unnecessary copies of Google profile information.
Our use and transfer of information received from Google APIs comply with the Google API Services User Data Policy, including applicable Limited Use requirements.
4. How We Use Information
We process limited information for the following purposes:
- Authenticating users and providing requested services.
- Maintaining secure sessions.
- Operating and troubleshooting website functionality.
- Detecting security threats, abuse, or unauthorized access.
- Responding to communications and support requests by email or telephone.
- Checking whether a project fits our services, generating assessment questions and documents, providing downloads, and following up about the project.
- Understanding website traffic and improving website content and usability.
- Complying with applicable legal obligations.
We do not use personal information for third-party advertising, automated marketing profiles, or the sale of personal data.
5. Cookies and Similar Technologies
Our website and its authentication providers may use essential cookies and similar technologies. These technologies may be necessary to maintain login sessions, protect against unauthorized access, remember essential session settings, and ensure website functionality.
We use Google Analytics to understand visits, page use, and traffic sources. Google may use cookies or similar identifiers and process device, browser, and interaction information for these measurements. This analytics information is separate from the project details you submit to the assessment. Browser cookie controls, tracking protection, and the Google Analytics opt-out browser add-on can limit analytics collection. We do not currently change website behavior in response to browser Do Not Track signals. Third-party providers may collect activity information across websites under their own privacy practices.
6. Third-Party Services and Information Sharing
We may rely on third-party service providers for website hosting, authentication, infrastructure, and security. These providers may process limited information necessary to deliver their services.
When you submit our contact form, we send a notification with your name, email address, phone number, organization, and a preview of your message through Pushover so our team can respond.
When you complete a project assessment, we send our team a Pushover notification containing your contact details, project title, a preview of your brief, and a signed link to the completed assessment. The link allows its holder to download the assessment and is intended for you and the Riveloper team. Anyone you share it with may also access the document; keep it private.
We may disclose information only when reasonably necessary to operate requested services, comply with applicable law, protect our systems and users, or respond to valid legal requests. We do not sell, rent, or trade personal information.
Google's privacy practices are described at https://policies.google.com/privacy.
When you begin an assessment, we send your project brief to OpenAI to check service alignment and, when appropriate, generate follow-up questions. When you complete it, we send your project details, answers, and preliminary analysis to OpenAI to generate a conceptual architecture. This processing begins even if you do not finish the assessment. Contact details are stored by Riveloper and added to the assessment document on our server. See OpenAI's privacy policy and Pushover's privacy policy for their practices. Do not submit passwords, API keys, Social Security numbers, payment card details, regulated health information, or confidential information you are not authorized to share.
7. Data Storage and Retention
Contact submissions, assessment sessions, completed assessment documents, and notification delivery records are stored on our server. Hosting, security, and analytics providers may retain technical or usage records under their own retention practices.
Information required for authentication may be processed temporarily or maintained in limited session-related records as necessary for the service to function securely. Hosting and infrastructure providers may independently retain technical logs under their applicable retention practices.
Emails and other communications sent directly to Riveloper may remain in our communication systems for as long as reasonably necessary to respond, maintain appropriate business records, or meet legal requirements.
Contact form submissions are saved on our server, including the information you enter and the submission time. We retain them as needed to respond and maintain appropriate business records.
When information is no longer required, we take reasonable steps to delete it or allow it to expire in accordance with the relevant system's retention practices.
Project assessment records and signed download links do not currently expire automatically. We retain records as reasonably needed for project follow-up, business records, service security, and legal obligations. You may request deletion using the contact information below. Records in backups or records needed for legal or security purposes may remain for a longer period.
8. Data Security
We use reasonable technical and organizational safeguards designed to protect information processed by our services. These may include encrypted connections, secure authentication methods, access restrictions, and standard security practices.
When using Google Sign-In, your Google account password is handled by Google and is not provided to Riveloper. No internet-based system can guarantee complete security.
9. Your Rights and Choices
You may choose not to use optional authentication features or third-party integrations. U.S. residents may request access to, correction of, or deletion of personal information maintained by Riveloper. Rights and exceptions depend on applicable federal and state law and whether that law applies to our business. We may verify your identity before fulfilling a request, and may retain information where required or permitted by law. If applicable law provides an appeal right, you may appeal a decision by replying to our response. We will not unlawfully discriminate against you for exercising an applicable privacy right.
If we do not retain the requested information, we will explain that no corresponding information is available for deletion or disclosure.
You can manage or revoke Google account connections at https://myaccount.google.com/connections.
Revoking Google access prevents future authorized access through that connection but does not necessarily remove information previously retained by third-party providers.
To submit a privacy or deletion request, email [email protected]. We will review and respond to requests in accordance with applicable law.
10. Children's Privacy
Our website and services are not specifically directed toward children under 13. We do not knowingly collect personal information from children under 13 in violation of applicable law. If we become aware that such information has been collected improperly, we will take appropriate steps to remove it.
11. United States Operations
Riveloper operates in the United States and this notice addresses our U.S. website services. Our service providers may process information in the United States or other locations where they operate. This notice does not represent that every U.S. state privacy statute applies to Riveloper or limit any nonwaivable rights under applicable law.
12. Changes to This Policy
We may update this Privacy Policy when our services, technologies, or legal obligations change. Updates will be published on this page with a revised effective date. Where required, we will provide additional notice or obtain consent before implementing materially different uses of personal information.
13. Contact Us
Questions about this Privacy Policy, information handling, or privacy-related requests may be directed to:
Riveloper
Website: https://riveloper.com
Email: [email protected]