RiVara Business OS ("RiVara", "we", "us") provides AI receptionist, scheduling, knowledge, and automation software for service businesses. This policy explains how we handle personal data on our marketing site and product.

We collect information you provide directly and data generated when you use our services.

We use personal data to operate and improve RiVara, communicate with you, and meet legal obligations.

Customer organization data is scoped by organization. We design product queries, knowledge retrieval, and storage paths so one tenant cannot access another tenant's data under normal operation.

We do not sell personal information. We may share data with subprocessors that help us run infrastructure (hosting, email delivery, analytics) under contractual confidentiality and security obligations, or when required by law.

We retain account and operational data for as long as your organization uses RiVara and for a reasonable period afterward for backups, disputes, and legal requirements. You may request deletion subject to legitimate retention needs.

We use industry-standard controls including encryption in transit, access control (RBAC), and organization-scoped data access. No method of transmission or storage is 100% secure; see our Security page for product posture details.

Depending on your location, you may have rights to access, correct, export, or delete personal data. Contact us to exercise those rights. Marketing emails include unsubscribe options where applicable.

RiVara is built for business use. We do not knowingly collect personal information from children under 16.

We may update this policy as the product evolves. Material changes will be reflected by updating the "Last updated" date on this page.

Privacy requests: business.rivara@gmail.com. For product security questions, also see /security.