Privacy Policy

Who is responsible

Hallridge Holdings LLC is the controller for personal data about website visitors and account holders. Hallridge Holdings LLC (Wyoming, USA) operates Rivyva. Its registered address is 30 N Gould St Ste R, Sheridan, WY 82801, USA. For personal data inside your app, you are the controller and we are your processor. Email hello@rivyva.com.

Privacy notice

A contact message stores a topic, a name, an email address, and a message, and what your app was built with if you give it. A waitlist entry stores your email, your plan, and your marketing choice only. A free scan stores the scan URL, the findings, and a daily salted hash of your IP address so we can limit repeat scans. When you unlock a scan, we store your email and marketing choice with it and delete them with the scan after 30 days. Marketing email is a separate opt-in, and the box is unticked by default. We do not collect phone numbers. We do not use advertising pixels or third-party analytics.

We use these details to run the site, show your free scan results on the page, reply to your message, and keep your waitlist entry. We do not send automatic emails yet. We send marketing email only if you opted in, and every marketing email will have a link to unsubscribe. We do not sell personal data.

Form entries and free scan results are stored on our hosting provider's servers (Hetzner, Helsinki, Finland) and in their encrypted backups.

We delete a waitlist entry or contact message 12 months after it was last sent or updated. We delete a free scan after 30 days. We keep access logs, including IP addresses, for 14 days to keep the site running and spot abuse.

To ask us to delete your personal data, email hello@rivyva.com or use the contact form and choose the topic Privacy / delete my data. We reply within 30 days.

Lawful basis

We run the site, show your free scan results, reply to your message, and keep your waitlist entry because you asked us to. That basis is a contract, or steps before a contract.

We keep a daily salted hash of your IP address, and we keep access logs, to keep the site running and spot abuse. That basis is legitimate interests.

We send marketing email only if you opted in. That basis is consent. You can withdraw that consent at any time.

We keep a record where the law requires it. That basis is a legal obligation.

How long

Account data is kept while the account is open, plus 90 days.

We delete a waitlist entry or contact message 12 months after it was last sent or updated. We delete a free scan after 30 days. When you unlock a scan, we store your email and marketing choice with it and delete them with the scan after 30 days.

We keep access logs, including IP addresses, for 14 days to keep the site running and spot abuse.

Your rights

You can ask for access, correction, export, or deletion of your personal data. You can object to processing that is based on legitimate interests. You can withdraw consent for marketing email.

This policy is governed by US law and the laws of the State of Wyoming. If you have a concern about your data, email hello@rivyva.com and we will reply within 30 days.

To ask us to delete your personal data, email hello@rivyva.com or use the contact form and choose the topic Privacy / delete my data. We reply within 30 days.

Children

The service is not for anyone under 18.