Last updated: March 2026
Effective date: March 2026

This Privacy Policy explains how RIVEL (“RIVEL,” “we,” “us,” “our”) collects, uses, shares, and protects personal information when you use our websites, products, and services (collectively, the “Services”), including our web application and any related experiences, content, and features.

Contact: info@rivelcompanies.com

1) Who we are (Data Controller)

RIVEL is currently operated as a project and brand and is in the process of formal incorporation. Until formal incorporation is completed, the data controller for the Services is RIVEL (the project operator).

If you need to exercise privacy rights or have questions, contact: info@rivelcompanies.com.

2) Scope

This Policy applies to:

• our website(s) and landing pages,
• the RIVEL web application,
• any community, research, content, and communications we provide in connection with the Services.

It does not apply to third-party services you use independently (e.g., Stripe, Google, Apple, social networks). Those services have their own privacy policies.

3) Information we collect

We collect information in four ways: (A) you provide it, (B) we collect it automatically, (C) we receive it from integrations you enable, and (D) payments (handled by Stripe).

A) Information you provide

• Account & profile: name, email, username, password (stored using hashing), profile settings, preferences.
• Content you create: notes, tasks, missions, OKRs, messages, journal entries, knowledge base entries, files you upload, and other content you submit within the Services.
• Communications: messages and information you send to us (support, contact forms, feedback, survey responses).
• Business information (if you engage with RIVEL services): company name, role, goals, and details you choose to share for delivery.

B) Information we collect automatically

• Usage data: pages/screens visited, features used, clicks, session duration, actions taken in the Services.
• Device & technical data: IP address, browser type, device type, OS, language, and approximate location derived from IP.
• Log data: diagnostic data to maintain security and reliability.

C) Information from integrations you enable

If you connect third-party tools (e.g., calendar, email, CRM, web services), we may receive and process the data necessary to provide that integration as authorized by you. You can disconnect integrations at any time.

D) Payments (Stripe)

If you purchase paid Services, payments are processed by Stripe. We typically receive limited payment-related information such as billing details and payment status. We do not store full payment card numbers; they are handled by Stripe.

4) Sensitive data and wellbeing-related information

RIVEL may include features related to wellbeing and personal tracking (e.g., mood/energy/habits/reflections). This information can be sensitive depending on jurisdiction and context.

• You choose whether to provide this information.
• We treat wellbeing-style data as sensitive in practice and apply additional protections (see Security).
• RIVEL is not a medical service or medical device and does not provide medical advice.

5) How we use your information

We use personal information to:

• Provide and operate the Services (create accounts, authenticate users, store your content, enable features).
• Personalize and improve the experience (recommendations, templates, organization, and helpful guidance).
• Power AI-assisted features (e.g., drafting, summarizing, suggesting next actions) based on the content and context you provide within the Services.
• Maintain safety and security (fraud prevention, abuse detection, account protection).
• Provide support and respond to inquiries.
• Analytics and product improvement (understanding usage to improve performance and reliability).
• Legal compliance (tax, accounting, enforcing terms, responding to lawful requests).
• Communications (service updates and announcements; marketing communications only where permitted or with consent—unsubscribe anytime).

We do not sell your personal information.

6) AI processing

RIVEL may provide AI-assisted features. Important notes:

• Your control: AI outputs depend on what you choose to input and request.
• No medical decisions: We do not use AI to provide medical diagnoses or treatment decisions.
• No “solely automated” significant decisions: We do not use AI to make decisions producing legal or similarly significant effects about you without appropriate human involvement.

7) How we share information

We share information only as needed:

A) Service providers (processors)

We use third-party vendors to host and operate the Services and support core functions. Our current core vendors include:

• Vercel (hosting / deployment)
• Supabase (database / authentication / storage services)
• Google Cloud (infrastructure and related services)

These providers process data under contractual obligations to protect it and use it only to provide services to us.

B) Payment processing

Stripe processes payments for paid Services.

C) Integrations you enable

We share information with third-party services only when you choose to connect them and only as required for that integration.

D) Legal and safety

We may disclose information if required by law or to protect rights, safety, and security (e.g., to respond to lawful requests, prevent fraud or abuse).

E) Business changes

If we undergo a business transition (e.g., incorporation, merger, acquisition, reorganization), information may be transferred as part of that process subject to appropriate protections.

8) Data retention

We retain personal information only as long as necessary to:

• provide the Services,
• comply with legal obligations,
• resolve disputes,
• enforce agreements.

Typical approach:

• Account data: retained while your account is active.
• User content: retained until you delete it or request deletion, subject to legal requirements.
• Backups: may persist for a limited period after deletion for security and disaster recovery.

9) Security

We implement safeguards designed to protect personal information, such as:

• access controls and least privilege principles,
• encryption in transit and, where applicable, at rest,
• monitoring for abuse and suspicious activity,
• separation of environments and secure secrets management.

No system can be guaranteed 100% secure. If we become aware of a security incident affecting your data, we will notify you and regulators as required by applicable law.

10) International data transfers

We operate globally and may process data in countries other than your own. Where required (e.g., EEA/UK), we rely on appropriate safeguards such as contractual protections and recognized transfer mechanisms.

11) Your privacy rights

Depending on where you live, you may have rights to:

• Access your personal information
• Correct inaccurate information
• Delete personal information
• Restrict or object to certain processing
• Port your data (where applicable)
• Withdraw consent (where processing is based on consent)
• Opt out of certain uses in jurisdictions that provide those rights

To exercise rights, email info@rivelcompanies.com with:

• the email address associated with your account (if any),
• the request you are making,
• any relevant details to help us verify identity and locate the data.

We may need to verify your identity before fulfilling certain requests.

12) Cookies and tracking technologies

We use cookies and similar technologies for:

• essential site functionality,
• preferences,
• performance and analytics,
• security.

You can control cookies via browser settings. Where required by law, we provide consent mechanisms for non-essential cookies.

13) Children’s privacy

The Services are not intended for children under 13 (or under 16 where required by local law). We do not knowingly collect personal information from children. If you believe a child has provided information, contact info@rivelcompanies.com.

14) Third-party links

Our Services may include links to third-party sites. Their practices are governed by their own policies, and we are not responsible for them.

15) Changes to this Privacy Policy

We may update this Policy from time to time. If changes are material, we will provide notice (e.g., in-app or email notice) and update the “Last updated” date.

16) Contact

For questions or requests regarding this Privacy Policy: info@rivelcompanies.com