Data Processing Agreement
Effective 16 October 2026 · Last updated 15 October 2026 · Version 1.0
Roles
You are the controller. Hallridge Holdings LLC (Wyoming, USA), which operates Rivyva, is the processor. Its registered address is 30 N Gould St Ste R, Sheridan, WY 82801, USA. The subject is the service, for the life of the account.
What we process
Whatever your code, configuration, backups or logs contain, plus account contacts. We process it only to scan, prepare fixes and run drills on temporary copies.
Duties
We process on your instructions, limit who can see the data, isolate scans, encrypt stored snippets, keep short-lived access logs, including IP addresses, to keep the site running and spot abuse, help with data-subject requests, and delete or return data at the end.
Sub-processors
They are listed on the sub-processors page. We give 30 days' notice before adding one.
Incidents
We will tell you without undue delay, and within 48 hours of becoming aware, if personal data we process for you is breached.