Privacy Policy

This Privacy Policy describes how Rivyt (“we”, “us”, “our”), operated by Naveiyra LLC, collects, uses, and protects your information when you use our service.

1. Information We Collect

Account information. When you sign up, we collect your name, email address, company name, and role.

Content you provide. You upload documents (SOPs, manuals, interviews, etc.) into your workspace. We process these documents to provide the service.

Usage data. We log the queries you submit, the documents retrieved, and basic system telemetry (response times, errors) to operate and improve the service.

Automatically collected. IP address, browser type, device information, and pages visited, via standard web logs.

2. How We Use Your Information

We use your information only to:

• Provide, maintain, and improve the Rivyt service
• Authenticate users and enforce access controls
• Communicate with you about your account and service updates
• Investigate and prevent abuse, fraud, or security incidents
• Comply with legal obligations

We do NOT sell your information. We do NOT use your uploaded documents to train general-purpose AI models. We do NOT share your content with other customers.

3. Subprocessors

We use the following third-party services to operate Rivyt. Each is bound by confidentiality and data protection obligations:

• Anthropic (Claude API), large language model inference
• Voyage AI, document embedding generation
• Pinecone, vector database for document indexing
• Supabase, authentication, database, file storage
• Railway, backend application hosting
• Vercel, frontend hosting
• Formspree, contact form submissions
• Cloudflare, DNS and domain registration

A complete list of subprocessors and their roles is available on request.

4. Data Retention

• Account data is retained while your account is active
• Uploaded documents are retained while indexed in your workspace
• Query logs are retained for 90 days for troubleshooting and abuse prevention, then deleted
• When you delete a document, it is removed from our systems within 30 days
• When you close your account, all associated data is deleted within 30 days

5. Your Rights

Depending on your jurisdiction (GDPR, CCPA, etc.), you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data
• Object to or restrict processing
• Receive a portable copy of your data
• Withdraw consent at any time

To exercise any of these rights, email privacy@getrivyt.com.

6. Security

We protect your data with encryption in transit (TLS) and at rest, per-tenant isolation in our vector database, role-based access control, audit logging, and strict access controls for our own team. See our Security page for details.

7. International Transfers

Your data may be processed in the United States. If you are located outside the US, appropriate safeguards (Standard Contractual Clauses) are in place with our subprocessors.

8. Children

Rivyt is not intended for children under 18. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or in-product notification. The “Last updated” date at the top of this policy indicates the most recent revision.

10. Contact

Privacy questions: privacy@getrivyt.com
General contact: hello@getrivyt.com
Operated by: Naveiyra LLC, Delaware, USA