Privacy Policy

1. Who this applies to

Rivoro (“we,” “us”) provides software for service businesses (“Business Owners,” “you”) to manage quotes, jobs, invoices, and payments. This policy covers both Business Owners who sign up for Rivoro and the individual customers (“End Customers”) whose information a Business Owner enters into Rivoro to run their business.

2. What we collect

• Account information: name, email address, and authentication data when you sign up (directly or via Google/Microsoft sign-in).
• Business information: business name, address, phone, tax settings, and branding details you provide.
• End Customer information: names, emails, phone numbers, and service/billing addresses that a Business Owner enters to create quotes, jobs, and invoices. Business Owners are responsible for having a lawful basis to share this information with us.
• Job content: quote/invoice line items, scheduling details, notes, and photos uploaded for a job.
• Payment information: we never see or store full card numbers. Payments are processed directly by Stripe; we store only transaction metadata (amount, status, timestamps) needed to reconcile invoices.
• Quote requests: if a Business Owner turns on their public request page, the name, email or phone number, address, and message a visitor types into that form are saved to that business’s account.
• Team members: the email address, name, and role of people a Business Owner invites to their account.
• Feedback: messages you send through the Feedback button, along with your account email, business name, and the page you were on.
• Usage data: log data and error reports used to keep the service running and secure.

3. How we use it

• To operate the core features: quotes, jobs, scheduling, invoicing, and payments.
• To send transactional emails on a Business Owner’s behalf (a quote or invoice being sent, a payment receipt, an appointment reminder) to their End Customers.
• To process subscription billing for Business Owners.
• To detect, investigate, and prevent fraud, abuse, and security incidents.
• To power optional AI-assisted features (e.g. polishing a quote description), which send only the specific text you submit to our AI provider, never your full business or customer database.

We do not sell personal information.

4. Who we share it with

We use the following third-party service providers, each of which processes data only to provide their service to us:

• Supabase — database, authentication, and file storage.
• Stripe — payment processing and subscription billing.
• Resend — transactional email delivery.
• Anthropic — optional AI text-assist features.
• Google / Microsoft — only if you choose to sign in with one of these providers.
• Vercel — application hosting.

We disclose information if required by law, or to protect the rights, property, or safety of Rivoro, our users, or the public.

5. Data retention

We retain account and business data for as long as an account is active. If you delete your account, we delete or anonymize your data within a reasonable period, except where we’re required to retain records (e.g. for tax or accounting purposes) or where data has already been shared with a third-party processor like Stripe for a completed transaction.

6. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information. Business Owners can manage most of this directly in Settings, including downloading all their data and photos and deleting their account. End Customers who want to exercise these rights should contact the business they worked with directly, or reach us using the contact info below and we’ll help route the request.

7. Security

We use industry-standard safeguards — encryption in transit, access controls, and row-level data isolation between businesses — but no system is 100% secure. We can’t guarantee absolute security of information transmitted to or stored on Rivoro.

8. Children

Rivoro is intended for business use and is not directed at children under 16. We don’t knowingly collect personal information from children.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

10. Contact

Questions about this policy or your data? Email privacy@rivoro.app.