1. Scope and Categories of Data Collection

We collect personal information based on your interaction with Rivvun:

• Website Visitors: Technical data including IP address, browser type, operating system, and engagement patterns via cookies and similar tracking technologies.

• Prospective & Existing Customers: Professional contact information (name, business email, job title) and communication records from sales and marketing inquiries.

• Platform Authorized Users: Account identifiers (name, work email) and detailed Usage Data (feature interaction, session duration, and system logs) to ensure service performance and security.

• Partners and Vendors: Business contact details and, where necessary, financial or payment information for managing our supply chain.

• Job Applicants: Resumes, professional history, and qualifications provided during the application process.

2. How We Use Your Information

Rivvun processes data under the following legal bases:

• Service Delivery & Optimization: To provide and maintain the Platform, including account provisioning and customer support.

• AI Model Improvement: We may use aggregated and de-identified data derived from Platform usage to train, refine, and improve our machine learning models and algorithms. We do not use “Customer Data” (the content within your contracts/files) for training models across different customers without explicit contractual authorization.

• Security & Integrity: To detect and prevent fraud, unauthorized access, and to ensure the “Security of Processing” required by global regulations.

• Legal & Compliance: To fulfill our obligations under laws such as GDPR (EU/UK), CCPA/CPRA (USA), and the Digital Personal Data Protection (DPDP) Act (India).

3. Disclosure of Personal Information

We do not sell your personal information. We share data only with:

• Service Providers (Sub-processors): Third-party vendors providing essential infrastructure (e.g., cloud hosting, security monitoring). A current list of our sub-processors is available to customers upon request.

• Corporate Affiliates: Entities within the Rivvun corporate group for internal administrative and operational purposes.

• Legal Authorities: When required by law or to protect the safety and rights of Rivvun, our users, or the public.

• Business Successors: In the event of a merger, acquisition, or restructuring.

4. International Data Transfers

Rivvun operates globally. Personal information may be transferred to and processed in countries outside your residence, including the United States and India. For such transfers, we utilize:

• Standard Contractual Clauses (SCCs) approved by the European Commission and the UK Information Commissioner’s Office.

• Adequacy Frameworks and specific safeguards required by the India DPDP Act.

5. Data Security and Retention

We implement industry-standard technical and organizational measures (including encryption at rest and in transit) to protect data. We retain personal information only for the duration necessary to fulfill the purposes outlined in Section 2, or as mandated by statutory retention periods (e.g., tax or employment law).

6. Your Global Privacy Rights

Depending on your jurisdiction, you may exercise the following rights:

• Access & Portability: Request a copy of your data in a structured format.

• Rectification & Erasure: Correct inaccurate data or request “The Right to be Forgotten.”

• Objection & Restriction: Limit how we process your data, particularly for marketing or automated profiling.

• Consent Withdrawal: Withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

• Nomination (India): Under the DPDP Act, the right to nominate an individual to exercise rights on your behalf in the event of death or incapacity.

To exercise these rights, contact privacy@rivvun.ai.

7. Third-Party Links & Cookies

Our website may contain links to external sites. We are not responsible for their privacy practices. You can manage your cookie preferences through your browser settings or our on-site consent manager.

8. Updates to This Statement

We update this statement periodically to reflect changes in AI technology and global privacy laws. The “Effective Date” at the top reflects the most recent version.

9. Contact Information

For questions regarding this statement or our data handling practices: Rivvun AI Legal Team Email: privacy@rivvun.ai