Terms of Service

Effective date: 14 October 2026.

The short version

This summary is for convenience only. The numbered terms below are what apply.

• Rivyt is a work tool for manufacturing and industrial companies. You can use it only if your organization invites you, you are 18 or older, and you use it for work.
• Your organization owns its documents and everything Rivyt makes from them. We use them only to run Rivyt for your organization. We never use them to train AI models, and we never sell them.
• AI answers can be wrong. Check the cited source before you act. Never use Rivyt in place of a controlled procedure, lockout and tagout, a safety step or a qualified person’s judgement.
• If you use voice, only record yourself. Ask before recording anyone else.
• Your organization’s administrators can see your profile, and the questions and answers you ask in their workspaces.
• Do not upload export-controlled, ITAR or CUI data unless your organization has a signed agreement with us that allows it.

1. Who we are and what these Terms cover

1.1 Rivyt is provided by Naveiyra Holdings, Inc. dba Rivyt (“Rivyt”, “we”, “us”), a Delaware corporation. Contact: hello@getrivyt.com.

1.2 These Terms of Service (the “Terms”) apply to the Rivyt web application at app.getrivyt.com, Fox (Rivyt’s phone and voice interface), and related services (together, the “Service”).

1.3 “Customer” means the company or other organization that has an account with Rivyt and invites people to use it. “You” means the individual using the Service (a “User”). If you accept these Terms on behalf of a Customer, you confirm you have authority to bind it, and “you” also means that Customer where the context requires.

1.4 A Customer may have a separate signed agreement with Rivyt (a “Customer Agreement”), such as a pilot agreement or subscription agreement, and a data processing addendum (a “DPA”). Section 17 explains how they fit together.

2. Who may use Rivyt

2.1 Business use only. The Service is for business use by Customers and their personnel. It is not offered to consumers for personal, family or household use.

2.2 18 or older. You must be at least 18 years old. The Service is not directed to children, and we do not knowingly collect information from anyone under 18.

2.3 By invitation. You may use the Service only if a Customer has invited you, or you are setting up an account for a Customer you are authorized to represent. Your access depends on the Customer: if it removes you, or its account ends, your access ends.

2.4 Lawful use and sanctions. You may not use the Service if you are barred from doing so under US law, including if you are named on a US government restricted party list, or from a country or region subject to comprehensive US sanctions.

3. Accounts and security

3.1 Your account. Each person needs their own account. Do not share your account or let anyone else use it. Give accurate information and keep it up to date.

3.2 Multi-factor authentication is required. Every account must use an authenticator app. We may ask for authentication again before sensitive actions, and we may limit repeated code attempts.

3.3 Passwords. Use a strong password that you do not use elsewhere. We refuse passwords known to have been exposed in breaches, and we ask for your current password (and, for older sessions, an emailed code) before a password change.

3.4 Tell us about problems. If you think someone else has accessed your account, or you find a security vulnerability, tell your administrator and email security@getrivyt.com promptly. Please report vulnerabilities in good faith and do not access other people’s data while doing so.

3.5 Your responsibility. You are responsible for activity under your account unless it results from our failure to meet our security obligations.

4. Customer administrators

4.1 Who they are. A Customer appoints administrators (“Admins”). Company Admins manage every workspace in the Customer’s account; workspace managers manage the workspaces they are given.

4.2 What Admins are responsible for. On behalf of the Customer, Admins are responsible for:

(a) inviting only people who should have access, and removing access promptly when someone leaves or no longer needs it;
(b) deciding which workspaces each person may use. Workspaces are private by default, and new people must be added by an Admin to a workspace;
(c) giving a genuine reason when a company Admin joins a private workspace. The reason is shown to that workspace’s members;
(d) connecting only content sources the Customer is entitled to connect, and checking that everyone in a workspace may read what is connected to it (Section 8);
(e) keeping Restricted Data out of the Service unless the Customer has a signed agreement that allows it (Section 5.2(b));
(f) deciding whether voice features and knowledge interviews are used, and giving any notices or obtaining any consents the law requires where they are (Section 7);
(g) giving employees any notice the law requires that their use of the Service may be monitored. Admins can see the questions and answers of members of their workspaces; and
(h) handling requests from their own personnel to see, correct or delete their information, with our help where needed.

4.3 Admins act for the Customer. Rivyt may rely on instructions given by a Customer’s Admins as instructions from the Customer.

5. Acceptable Use Policy

This Acceptable Use Policy (the “AUP”) applies to every User and Customer. It is part of these Terms and of every Customer Agreement that refers to it.

5.1 Do not break the law. Do not use the Service to break any law, or to infringe anyone’s intellectual property, privacy or other rights. Upload only content you or the Customer have the right to use in this way.

5.2 Do not submit restricted data. Unless the Customer has a signed agreement with Rivyt that expressly allows it, and names the data and the controls, do not upload, sync, dictate or otherwise submit the following “Restricted Data”:

(a) any data whose processing by the Service would be unlawful;
(b) export-controlled or government-controlled data: technical data or defense articles under the ITAR; technology, technical data or software controlled under the EAR; Controlled Unclassified Information; covered defense information; or any data the Customer must keep from foreign persons. The Service is not designed or authorized for controlled data;
(c) government identifiers (such as Social Security numbers), payment card or bank account numbers, health information, or biometric data, except where incidental to an equipment document and unavoidable; or
(d) passwords, API keys or other secrets, other than through a feature designed to receive them.

5.3 Do not reverse engineer. Do not decompile, disassemble or reverse engineer the Service, or try to derive its source code, prompts, models or model weights, except where the law expressly allows this despite this restriction.

5.4 Do not try to break isolation or security. Do not:
(a) try to access any other Customer’s data, or any workspace, document or account you have not been given;
(b) try to bypass workspace or tenant isolation, authentication, multi-factor authentication, rate limits or any other security control;
(c) probe, scan or test the Service for vulnerabilities without Rivyt’s prior written permission, except good-faith reporting under Section 3.4; or
(d) upload malware, or content designed to manipulate the AI Features into ignoring their instructions or revealing another person’s data (prompt injection).

5.5 Do not scrape. Do not use bots, scripts or other automated means to access, copy or extract data from the Service, except through features or interfaces Rivyt provides for that purpose.

5.6 Do not build a competing model or product. Do not use the Service or its Output to develop, train or improve a competing product, or any general-purpose AI or machine learning model, or to benchmark the Service for publication without Rivyt’s consent.

5.7 Do not use it for harmful automation. Do not connect the Service or its Output to any system that operates, controls or changes machinery, safety systems or production processes without a qualified person reviewing and approving each action. Do not use Output to make decisions about individuals’ employment, pay, discipline or other consequential matters.

5.8 Do not record others without consent. Do not use voice features, interviews or any other feature to record another person without their consent and without any other permission the law requires. See Section 7.

5.9 Do not misuse the Service or other people. Do not share your account, resell access, impersonate anyone, overload the Service, or use it to harass anyone or to send spam.

5.10 Reporting and enforcement. Report suspected misuse to security@getrivyt.com. Rivyt may investigate suspected breaches of this AUP and may act under Section 11.

6. AI features and Output

6.1 What the AI does. The Service uses machine learning models to answer questions from the Customer’s documents, to build Rivyt Mind (a knowledge graph of equipment, parts, sites, procedures and similar facts, each tied to the sentence it came from), to help troubleshoot, to prepare decision briefs, and to transcribe and speak (the “AI Features”). Their results are “Output”.

6.2 Output can be wrong. Output can be incomplete, out of date, wrongly attributed, or simply wrong, even when it cites a source and sounds confident. It is only as good as the documents behind it.

6.3 Verify before you act. Check Output against the cited source, and against your organization’s controlled documents, before you rely on it. The Service shows the sources it used, and tells you when it could not find one.

6.4 Never a substitute. Output is never a substitute for:
(a) your organization’s controlled procedures and work instructions, or the equipment manufacturer’s instructions;
(b) lockout and tagout, energy isolation, permits to work, or any other safety procedure;
(c) the judgement of a qualified engineer, technician or safety professional; or
(d) any inspection, test, approval or sign-off that law, a standard or your organization’s quality system requires.
If Output conflicts with any of these, follow the controlled source.

6.5 You decide. You and your organization make every decision. The Service does not operate or control equipment.

6.6 Decision briefs are decision support only. A decision brief lays out options, figures and their sources, for example repair or replace. It does not recommend or choose an option. Figures are calculated by code from cited sources, but the sources or assumptions may be incomplete. Check the figures you rely on.

6.7 Personalized answers. Answers may be tailored to your role and profile. You can turn this off for yourself in Settings.

6.8 No training. Rivyt does not use Customer content, including your questions and Output, to train any AI model, whether ours or anyone else’s. Our AI providers’ terms with us do not allow them to train on it, and where a provider offers a setting to opt out of training, we have opted out.

7. Voice features

7.1 Off until you turn them on. Voice input, spoken answers and recorded knowledge interviews are optional. They are available only where the Customer has enabled them, and each person must give consent before their first recording.

7.2 Only record yourself. Only record yourself. Ask before recording anyone else. Before you start a recording, make sure no one else is speaking or can be heard, or that everyone who can be heard has agreed. Some states require every party to a conversation to agree before it is recorded. On a plant floor, move away from other people or wait until you are alone.

7.3 What happens to your voice. While you speak, audio is sent to our speech provider to be turned into text. Answer text may be sent to the same provider to be spoken aloud. Rivyt does not store your audio and does not create a voiceprint or identify you by your voice. Our speech provider may keep audio for up to 30 days for abuse monitoring, and then deletes it. The transcript is kept as part of your question history, or, for an interview, becomes knowledge claims attributed to your account and role, which an Admin reviews.

7.4 Interviews. If you record a knowledge interview, what you say becomes part of the Customer’s knowledge base, attributed to your account and job role, and remains the Customer’s after you leave. Colleagues’ names are not written into the knowledge graph.

8. Third-party connectors (Google Drive)

8.1 Your grant. A Customer can connect Google Drive so that Rivyt can read files from it. The person who connects Drive grants Rivyt access through Google’s own consent screen, using their Google account, and should do so only for files the Customer is entitled to share with Rivyt. The grant is tied to the person who started it. When Drive is connected with Google’s file picker, Rivyt reads only the files a person selects in it; it cannot see, list or search anything else in that Drive.

8.2 What Rivyt does with Drive data. Rivyt reads, converts and indexes the connected files only to provide the Service to the Customer. Rivyt’s use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Rivyt does not use Google data for advertising, does not sell it, and does not use it to train AI models. Rivyt staff do not read Google data except with the Customer’s agreement, for security, or to comply with law. The Privacy Policy and our Google data use page say more.

8.3 Who can see answers from Drive. Answers drawn from a Drive file are available to the members of the workspace it was added to. Add a file to a workspace only if everyone in that workspace may read it.

8.4 Revoking access. You can revoke Rivyt’s access at any time:
(a) in Rivyt, a workspace manager can disconnect Drive, which revokes the access token at Google. Synced documents stay in the workspace unless the manager also chooses to delete them; or
(b) in your Google Account’s security settings, under third-party connections, by removing Rivyt.
After revocation, Rivyt stops syncing. The Customer can ask privacy@getrivyt.com to delete all data derived from Google.

8.5 Google’s terms. Your use of Google Drive is governed by your agreement with Google. Google is not a Rivyt subprocessor, and Rivyt is not responsible for Google’s services. Microsoft SharePoint and OneDrive connectors, when offered, will follow the same principles.

8.6 Permission to copy and index what you select. When you select files in Google’s file picker, you give Rivyt express permission, on behalf of yourself and the Customer, to copy those files, keep copies of them and of each new version, convert them to text, split them into passages, index them, and build knowledge graph facts from them, and to keep those copies and that index for as long as the Customer’s content is kept under Section 9 and the Privacy Policy, only to provide the Service to the Customer. Select only files that you and the Customer are entitled to let Rivyt copy in this way.

8.7 Exporting your content. A Customer’s Admins can export the content of the workspaces they belong to at any time while the Customer’s account is active, including the text Rivyt extracted from each document, the original files, question history and the knowledge graph, in common machine-readable formats. Files synced from Google Drive also remain in the Customer’s own Drive.

9. Customer content and licenses

9.1 Your organization owns its content. As between Rivyt and the Customer, the Customer owns all content that it or its Users submit, or that the Service obtains from its connected sources, and everything derived from it, including Output, question history and the Rivyt Mind knowledge graph (“Customer Content”).

9.2 The license you give us. The Customer grants Rivyt a limited, non-exclusive, royalty-free license to host, copy, process, transmit and display Customer Content only to provide the Service to that Customer, to prevent or fix security, technical or support problems, and to comply with law. Rivyt’s subprocessors receive the same limited license for the same purposes.

9.3 Nothing else. Rivyt does not use Customer Content to train AI models, to improve the Service for other customers, or for advertising, and does not sell or share it.

9.4 Usage Metrics. Rivyt collects operational data about how the Service runs (counts, timings, feature use, errors and costs), which never includes the content of documents, questions, answers, profiles or audio. We use it to run, secure, support, bill for and improve the performance of the Service, and disclose it outside Rivyt only when it is aggregated across many customers and de-identified so that it cannot identify any Customer, User or site.

9.5 Feedback. If you send us ideas or suggestions, we may use them without obligation to you. We will not name you as the source publicly without your consent.

9.6 Rivyt’s property. Rivyt and its licensors own the Service and everything in it other than Customer Content. We grant you a limited, revocable, non-transferable right to use the Service for the Customer’s business during its account, under these Terms.

9.7 Your profile. Your profile (name, email, job title, “In your own words” and the equipment you work on) is visible to people in your organization and is used to tailor answers if you allow it.

10. Privacy

10.1 Our Privacy Policy, at getrivyt.com/privacy, explains what personal information we collect, why, who receives it (our subprocessors), how long we keep it, and your choices. It is part of these Terms by reference.

10.2 Where Rivyt processes personal information on a Customer’s behalf, we do so as the Customer’s service provider or processor, under the Customer’s DPA or, if there is none, the data protection terms in Section 18.

10.3 Who can see what. Your organization’s Admins can see your profile and your questions and answers in their workspaces. Rivyt staff can read Customer Content only for support at the Customer’s request or with its agreement, for security, or to comply with law, and only with a stated reason.

10.4 Your rights. To ask to see, correct or delete your information, contact your Admin or privacy@getrivyt.com.

11. Suspension and termination

11.1 Suspension. Rivyt may suspend a User’s access, or a Customer’s account, if reasonably necessary to: (a) prevent or respond to a security threat or incident; (b) stop a material breach of the AUP, including the submission of Restricted Data; (c) comply with law or a lawful order; or (d) for a Customer without a Customer Agreement, address non-payment after notice. We will limit a suspension to what is needed, tell the affected Admins promptly (in advance where practical and lawful), and restore access when the cause is resolved.

11.2 Ending your access. Your access ends when the Customer removes you or its account ends. You may stop using the Service at any time. Removing a person deletes their account, profile and sign-in, and, if the Customer chooses, their questions and answers. Documents stay with the Customer.

11.3 Termination of a Customer account. A Customer Agreement governs how a Customer’s account ends and what happens to its data. Without one, Section 18 applies.

11.4 Survival. Sections 5, 6.2 to 6.6, 9, 13, 14, 16, 17 and 19 survive termination.

12. Changes to the Service and to these Terms

12.1 The Service. We improve the Service over time and may add, change or remove features. We will not materially reduce the security or data protections described in these Terms or a Customer’s DPA during that Customer’s term.

12.2 These Terms. We may update these Terms. For a material change, we will give at least 30 days’ notice by email to Customer Admins before it takes effect, and we will ask each User to accept the new Terms at their next sign-in. A change that is required by law, or that addresses a security issue, may take effect sooner. Changes do not apply to a dispute that arose before the change.

12.3 If you do not agree. If you or the Customer do not agree to an updated version, stop using the Service before it takes effect, and the Customer may end its account. A change to these Terms never overrides a signed Customer Agreement (Section 17).

12.4 Version history. We keep earlier versions of these Terms, with their dates, and will send any of them on request to hello@getrivyt.com.

13. Disclaimers

13.1 Except as expressly stated in these Terms or in a Customer Agreement, the Service and all Output are provided “as is” and “as available”. To the fullest extent the law allows, Rivyt disclaims all other warranties, express, implied or statutory, including warranties of merchantability, fitness for a particular purpose, title and non-infringement, and any warranty that the Service will be uninterrupted, error-free or secure against every threat, or that Output will be accurate, complete or fit for any safety-related use.

13.2 Section 6 (AI features and Output) is an essential part of these Terms.

14. Limitation of liability

14.1 Excluded damages. To the fullest extent the law allows, neither Rivyt nor a Customer is liable under these Terms for any indirect, incidental, special, consequential, exemplary or punitive damages, or for lost profits, revenue, goodwill or data, even if advised of their possibility.

14.2 Cap. To the fullest extent the law allows, Rivyt’s total liability arising out of or relating to these Terms or the Service will not exceed the fees the Customer paid Rivyt in the 12 months before the event giving rise to the claim.

14.3 Exceptions. Sections 14.1 and 14.2 do not limit liability for fraud, gross negligence or wilful misconduct, a party’s infringement of the other’s intellectual property, or any liability that cannot be limited by law.

14.4 Individual Users. You use the Service on the Customer’s behalf. Nothing in these Terms makes you personally liable for the Customer’s fees or for the Customer’s obligations. You remain responsible for your own deliberate misuse of the Service.

14.5 Customer Agreement. If a Customer has a Customer Agreement, its limitation of liability applies instead of this Section 14 between Rivyt and that Customer.

15. Customer responsibility for content

You agree to defend, indemnify and hold Rivyt harmless against third-party claims arising from Customer Content that infringes a third party’s rights, was submitted unlawfully, or violates these terms and conditions including Restricted Data submitted in breach of Section 5.2, and will pay all damages, fines, and costs including attorney’s fees, accountant fees, and investigation fees.

16. Governing law and disputes

These Terms are governed by the laws of the State of Delaware, without regard to its conflict of laws rules. The state and federal courts in Delaware have exclusive jurisdiction.

17. How a Customer Agreement takes precedence

17.1 Order of precedence. If there is a conflict, this order applies:
(a) the Customer’s DPA, for the processing of personal information;
(b) the Customer’s signed Customer Agreement (including any order form); and then
(c) these Terms.

17.2 What these Terms still govern. Even when agreements under 17.1(a) and (b) exist, these Terms govern each User’s personal conduct, including Sections 2, 3, 5 (the AUP, unless the Customer Agreement contains its own), 6 and 7.

18. Customers without a signed agreement

If a Customer has no Customer Agreement, these additional terms apply to you:

(a) Data protection. Rivyt processes Customer personal information as the Customer’s service provider and processor under the data processing terms published at getrivyt.com/dpa, which are part of these Terms.
(b) Confidentiality. Rivyt treats Customer Content as the Customer’s confidential information.
(c) Subprocessors. The current subprocessor list is at getrivyt.com/subprocessors, which may be updated from time to time.
(d) Security. Rivyt maintains the security measures described at getrivyt.com/security and will notify Admins without undue delay, and within 72 hours, after confirming a security incident affecting Customer Content.
(e) End of account. For 30 days after a Customer’s account ends, its Admins may export Customer Content, with Rivyt’s help. Rivyt then deletes it within a further 30 days (backups expire in their normal cycle) and will confirm the deletion in writing on request.

19. General

19.1 Electronic communications and signatures. You agree that we may provide notices and these Terms electronically, and that clicking to accept them is your electronic signature with the same effect as signing on paper. You can download or print the current version at any time from getrivyt.com/terms.

19.2 Assignment. You may not transfer your account or these Terms. Rivyt may assign these Terms to an affiliate or to a successor in a merger, acquisition or sale of its business, on notice.

19.3 Export and sanctions. You will comply with US export control and sanctions laws in using the Service.

19.4 US Government users. The Service is commercial computer software and documentation, provided to US Government users only with the rights in these Terms.

19.5 Entire agreement. These Terms, the Privacy Policy and any Customer Agreement are the entire agreement on their subject. If a provision is unenforceable, the rest remains in effect. A failure to enforce a provision is not a waiver.

19.6 Contact. General: hello@getrivyt.com. Privacy: privacy@getrivyt.com. Security: security@getrivyt.com. Naveiyra Holdings, Inc., Delaware, United States.