Rivenyx Privacy Policy
Rivenyx ("Company," "we," "us," "our"), operated by Robin Ristich, respects your privacy. This Privacy Policy explains what information we collect, how we use it, how we protect it, and your rights regarding your personal information.
This Privacy Policy applies to all users of rivenyx.ai and our related services, including one-on-one consultations. By creating an account or using our services, you agree to the collection and use of your information as described in this policy.
1. Information We Collect
Information you provide directly
| Data Type | Examples | When Collected |
|---|---|---|
| Account information | First name, email address, password | Account creation |
| Date of birth attestation | Age confirmation (18+) | Account creation |
| Intake responses | Your answers to intake questions about your situation, relationships, and dynamics | During intake for each order |
| Uploaded files | Screenshots, text messages, dating profile images, PDFs | During intake |
| Payment information | Credit card details, billing address | At checkout (processed by Stripe; we do not store full payment details) |
| Consultation content | Notes, context, and information shared during one-on-one consultations | During scheduled consultations |
| Communications | Emails or messages you send to us | When you contact us |
| Consent records | ToS acceptance, pre-payment acknowledgment, intake consent | Account creation, checkout, intake submission |
Information collected automatically
| Data Type | Examples | How Collected |
|---|---|---|
| Usage data | Pages visited, features used, timestamps | Server logs |
| Device information | Browser type, operating system, device type | Server logs |
| IP address | Network-level identification | Server logs |
We do not use tracking cookies for advertising. We may use essential cookies for authentication and session management.
2. How We Use Your Information
| Purpose | Data Used |
|---|---|
| Generate and deliver your insights and analysis | Intake responses, uploaded files |
| Conduct one-on-one consultations | Consultation content, account information |
| Process payments and manage your account | Account information, payment information |
| Detect safety concerns | Intake responses (automated keyword scan) |
| Communicate with you about your orders and consultations | Account information (email) |
| Enforce our Terms of Service and Content Guidelines | Account information, usage data, order metadata, uploaded content |
| Comply with legal obligations | As required by law |
We do not use your information to:
- Train AI models (our own or third-party)
- Sell to third parties
- Target advertising
- Build profiles for marketing purposes (unless you opt in to marketing communications)
- Share your intake content with other clients
3. AI Processing Disclosure
Our services use third-party artificial intelligence systems to generate analysis. When you submit intake information:
- Your intake text and uploaded files are sent to a third-party AI provider for processing
- The AI provider processes your data solely to generate your analysis
- We contractually prohibit our AI providers from using your data for their own model training, improvement, or any purpose other than generating your specific output
- AI processing occurs on servers operated by our AI provider, which may be located in the United States or other jurisdictions
- After your analysis is generated, we do not retain copies of the data sent to the AI provider beyond what is described in our retention schedule
Current AI provider: Anthropic (Claude). We reserve the right to change AI providers. If we do, the same contractual data protections will apply to any replacement provider.
4. Uploaded Content and Third-Party Information
Our services may involve you uploading content that contains information about, images of, or communications with other individuals who have not consented to our processing of their information.
You are responsible for:
- Ensuring you have the legal right to share uploaded materials
- Obtaining any necessary consent from individuals depicted in or identifiable from your uploads
- Complying with all applicable privacy, wiretapping, and eavesdropping laws
- Ensuring all individuals depicted in uploaded content are 18 years of age or older
We handle third-party information as follows:
- We do not independently verify the identity, age, or consent status of individuals depicted in uploaded materials
- Uploaded files are used solely for generating your analysis and are automatically deleted 90 days after delivery
- We do not contact, notify, or share information with any individual depicted in your uploads
- If a third party contacts us with a privacy complaint or legal claim related to uploaded content, we may remove the content and contact you
Content restrictions: All uploaded content must comply with our Content Guidelines as described in our Terms of Service. Content that violates these guidelines (including nudity, sexually explicit material, or content involving minors) will be removed and may result in account suspension or termination.
5. Data Retention
| Data Type | Retention Period | Deletion Method |
|---|---|---|
| Uploaded files | 90 days after delivery | Automatic deletion |
| AI processing drafts | Purged after final output approved and delivered | Automatic deletion |
| Final delivered outputs | While account is active plus 1 year after account closure | Automatic deletion or upon deletion request |
| Intake responses | 90 days after delivery | Automatic deletion |
| Consultation notes | While account is active; deleted 90 days after account closure | Automatic deletion or upon deletion request |
| Client context profile | While account is active; deleted 90 days after account closure | Automatic deletion or upon deletion request |
| Order metadata (ID, status, timestamps) | 7 years | Legal/accounting retention |
| Credit ledger transactions | 7 years | Legal/accounting retention |
| Consent and acknowledgment records | 7 years | Legal/accounting retention |
| Account information | While account is active; deleted 30 days after account closure | Upon account deletion request |
| Server logs (IP, user agent) | 90 days | Automatic rotation |
6. Data Deletion
You may request deletion of your data at any time by emailing robin@robinristich.com.
Upon receiving a deletion request:
- We will confirm receipt within 5 business days
- Deletion will be completed within 30 days
- We will delete all intake responses, uploaded files, delivered outputs, consultation notes, and client context profile data
- We will retain only the minimum records required by law or for legitimate accounting purposes (order metadata and financial transaction records), and these retained records will not contain intake content, uploaded files, or output text
Account deletion:
- You may request full account deletion at any time
- Account deletion triggers deletion of all associated data per the schedule above
- Active subscriptions must be canceled before account deletion
7. Data Security
We implement reasonable administrative, technical, and physical safeguards to protect your personal information. These include:
- Encryption of data in transit (TLS/SSL)
- Encryption of stored data at rest
- Access controls limiting who can view intake content and uploaded files
- Automatic deletion schedules to minimize data retention
No method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.
8. Third-Party Service Providers
We use the following categories of third-party service providers:
| Provider Category | Purpose | Data Shared |
|---|---|---|
| AI processing (Anthropic) | Generate analysis outputs | Intake text, uploaded files (for processing only) |
| Payment processing (Stripe) | Process payments and subscriptions | Payment details, billing information |
| Scheduling (Calendly or similar) | Schedule and manage consultations | Email address, first name, scheduling preferences |
| Email delivery | Send transactional emails (order confirmations, delivery notifications) | Email address, first name |
| Hosting/infrastructure | Host application and store data | All data (encrypted at rest) |
| Analytics (if applicable) | Understand usage patterns | Anonymized usage data only |
All third-party providers are bound by data processing agreements that restrict their use of your data to the specific services they provide to us.
9. Your Rights
All users:
- Access: You may request a copy of the personal information we hold about you
- Deletion: You may request deletion of your personal information (see Section 6)
- Correction: You may request correction of inaccurate personal information
- Portability: You may request your data in a portable format
- Opt-out of marketing: You may opt out of marketing communications at any time
Colorado residents (Colorado Privacy Act):
- Right to access, correct, delete, and obtain a portable copy of your personal data
- Right to opt out of the sale of personal data (we do not sell personal data)
- Right to opt out of targeted advertising (we do not engage in targeted advertising)
- Right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects
- To exercise these rights, contact robin@robinristich.com
- If we deny your request, you may appeal by contacting us at the same email address
California residents (CCPA/CPRA):
- Right to know what personal information we collect, use, and disclose
- Right to delete personal information
- Right to correct inaccurate personal information
- Right to opt out of the sale or sharing of personal information (we do not sell or share personal information for cross-context behavioral advertising)
- Right to non-discrimination for exercising your privacy rights
- To exercise these rights, contact robin@robinristich.com
Connecticut, Virginia, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws:
- We comply with applicable state privacy laws. To exercise your rights under your state's privacy law, contact robin@robinristich.com
We will respond to verifiable consumer requests within 45 days (or the timeframe required by your state's law).
10. Children's Privacy
Our services are not directed to individuals under 18. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from an individual under 18, we will delete that information immediately and terminate their account.
11. International Users
Our services are primarily intended for users in the United States. If you access our services from outside the United States, your information will be transferred to and processed in the United States. By using our services, you consent to this transfer. We do not currently offer services specifically designed to comply with GDPR or other non-US privacy frameworks.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or account notification at least 30 days before they take effect. Your continued use of our services after the effective date constitutes acceptance.
13. Contact
For privacy questions, data access requests, deletion requests, or complaints:
Email: robin@robinristich.com
Website: rivenyx.ai
This Privacy Policy is incorporated into and governed by our Terms of Service.