Privacy policy

Who we are

Rivora Product OS is built and operated by Rivora Connect (ABN 87 688 261 234), based in Australia. You can contact us about anything in this policy at anurag@rivoraconnect.com.au.

What we collect, and why

When you submit the early access form we collect your name, company, work email, an optional phone number, and an optional message. We use these details to respond to your request and arrange the conversation or walkthrough you asked for. We do not sell or share your details with third parties for their own use.

If you tick the optional box to receive occasional news from us, we also email you that. We email only people who tick that box, and every email has an unsubscribe link.

On the website itself we collect anonymous usage analytics (pages viewed, buttons clicked) to understand how visitors use the site. Marketing pages don't use your name, email or company in analytics.

Booking a call

You can book a free 30-minute session on our free-session page. The booking calendar there is provided by Calendly, so the calendar loads from Calendly when you open that page, and Calendly may set its own cookies and sees your IP address and browser details. If you book, Calendly receives the name, email address and any answers you enter, and tells us who booked and when. We use those details to arrange and run the session and, for the free session, to send you the written summary we promised. If you tick the optional box in the booking form, we also send you occasional news, with an unsubscribe link in every email.

The Contact page also links to a 15-minute Calendly event. That link opens Calendly's own site, where the same applies. Calendly holds booking records under its own privacy notice, and it may process data outside Australia. If you would rather not use Calendly, email us and we will arrange a time directly.

Cookies and analytics consent

We use a small number of essential cookies needed to run the site and keep you signed in - these are always on and require no consent. Optional analytics cookies (PostHog) are used to measure product usage and improve the experience. When you're signed in to Rivora and accept analytics, PostHog links your use of the product to your account (your name and email) so we can improve the product.

Optional cookies are off by default (the booking calendar on the free-session page comes from Calendly and is not controlled by the banner - see above and the Cookie Notice). When you first visit we show a consent banner where you can accept all, reject all, or choose categories (analytics and session replay separately). When you sign in to the product you are asked once to accept this notice and our terms; that choice is recorded against your account. Any session recordings mask all input fields and text, so the content you type is never stored in a recording. For the full list of cookies and to change your choice, see our Cookie Notice.

Where your information lives

Form submissions are delivered to us by email and are also recorded in our own database, hosted on Amazon Web Services in Sydney, Australia. Keeping our own record means an enquiry cannot be lost to an email delivery failure. Alongside your submitted details that record holds the time of submission, whether the email was delivered, and your browser type. Your IP address is stored only as a one-way cryptographic hash, which we use to detect automated abuse and cannot reverse back into an address.

We also rely on a small number of service providers that run our website and infrastructure - including Vercel (website hosting), Resend (email delivery), PostHog (analytics), and Calendly (booking). These providers may process data in regions outside Australia. We share only what each provider needs to perform its function.

How long we keep it

We keep enquiry records for 24 months from the date you contact us, after which they are permanently deleted. We chose that period because business conversations of this kind often run over many months, and beyond two years there is no longer a reason for us to hold an enquiry we did not take forward.

Website analytics are kept under our analytics provider's retention settings. When you send an enquiry, a random reference number links it to our delivery checks; it doesn't identify you. You can ask us to delete your enquiry record sooner at any time - see below.

Product workspace data

If your team joins the early access program, the product context you bring into Rivora Product OS (documents, feature requests, business rules) is isolated to your workspace and is handled under the terms we agree with you directly as part of the program. This policy covers the public website, early access enquiries and the connected tools described below.

We don’t use your content to train general-purpose AI models, and we will not knowingly permit our AI providers to use it for that. What Rivora learns stays in your workspace, as your product’s memory.

Connected coding tools and AI assistants

If you connect a coding tool or AI assistant, such as Claude, Cursor or ChatGPT, to Rivora, you sign in with your Rivora account and choose one workspace. The tool can then read the approved handoffs in that workspace: the approved parts of a feature, its questions and answers, the business rules and the sources they used. Drafts are never shared.

If you allow it, the tool can also send a suggestion back. Rivora keeps the suggestion on the feature for your team to review until someone deletes it. It never changes an approved part.

Rivora records each connection (which tool, who connected it and when it was last used) so you can see and end it under Settings, Integrations, Agent access. A connection lasts 90 days. What you do inside the tool itself is covered by that tool's own privacy policy.

Access, correction, and deletion

You can ask us at any time to show you the information we hold about you, correct it, or delete it. Email anurag@rivoraconnect.com.au and we will action your request within a reasonable time. If you have a concern we have not resolved, you can contact the Office of the Australian Information Commissioner (OAIC).

Changes to this policy

If we change this policy we will update this page and the date at the top. Material changes that affect early access participants will be communicated directly.