Privacy policy

1. Overview

We process information to operate RivetSignal, support your workspace, publish proof assets you choose to make public, and keep the Service secure.

This policy applies to visitors, account holders, workspace members, and anyone who interacts with RivetSignal-hosted pages, embeds, or proof feeds.

2. Information we collect

We may collect the following categories of information:

• Account and contact information, such as your name, email address, authentication identifiers, and communications you send to us.
• Workspace and business profile information, such as business name, public slug, website URL, and settings you configure.
• Proof content you import or create, including testimonial text, case study excerpts, project outcomes, summaries, tags, and related metadata.
• Source URLs and source evidence you provide, such as links, import notes, and supporting context tied to proof items.
• Customer or third-party confirmation recipient information when you request confirmation workflows, such as recipient email addresses and message content you authorize us to send on your behalf.
• Billing and subscription information processed by our payment provider (currently Stripe). RivetSignal receives limited billing metadata (for example, customer ID, plan status, and invoice references) but does not receive or store full payment card numbers.
• Usage, log, device, and security data, such as IP address, browser type, pages viewed, API requests, error logs, and signals used to detect abuse or protect accounts.

3. How we use information

We use information to:

• Provide, maintain, and improve the Service.
• Create, structure, publish, embed, and distribute Proof Cards and proof profiles when you choose to publish.
• Generate structured and machine-readable outputs (such as JSON-LD and public proof feeds) based on published content.
• Send account, billing, product, and confirmation-related emails.
• Use AI-assisted tools to suggest tags, summaries, classifications, or structure for proof content you submit.
• Secure the Service, debug issues, prevent fraud and abuse, enforce our terms, and comply with law.

4. Public content warning

When you publish a Proof Card, proof profile, embed, or proof feed, that content is intended to be public unless the product explicitly restricts access.

Published proof may be indexed, copied, embedded, or accessed by third parties. You are responsible for reviewing proof text, claims, and attachments before publishing.

Do not publish confidential, personal, or sensitive information unless you have the right and permission to do so.

5. AI processing

Proof text and related inputs may be processed by AI or model providers and infrastructure providers to suggest tags, summaries, classifications, or other structuring assistance.

AI suggestions do not verify truth, customer identity, legal compliance, or endorsement. You remain responsible for what you publish.

Do not submit sensitive personal information, regulated data, or confidential third-party information unless you have a lawful basis and permission.

6. How we share information

We may share information in these circumstances:

• With service providers and processors that help us operate the Service, such as hosting, database, authentication, storage, email delivery, payment processing, analytics (if used), and AI providers (if used). These providers are authorized to process information only as needed to perform services for us.
• For legal, compliance, and safety reasons, including to respond to lawful requests, protect rights and safety, investigate abuse, or enforce our terms.
• In connection with a business transfer, such as a merger, acquisition, financing, or sale of assets, subject to appropriate protections.
• As public content you choose to publish through RivetSignal, including on public proof pages, profiles, embeds, feeds, and structured exports.

7. Payments

Payments are processed by Stripe or another payment processor we designate. Payment details are handled by the processor under its own terms and privacy policy.

RivetSignal does not store full credit or debit card numbers.

8. Data retention

We retain account, workspace, proof, billing, and audit records as needed to provide the Service, maintain security, resolve disputes, comply with legal obligations, and prevent abuse.

You may unpublish or remove public proof according to product features and workspace permissions. Backups, logs, or copies may persist for a limited period for security, legal, or operational reasons.

9. Security

We use reasonable administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is completely secure.

We do not represent that the Service meets specific certification regimes (such as SOC 2 or HIPAA) unless we explicitly state otherwise in writing.

10. Your choices and rights

You can update certain account and workspace information in the product. You can contact us to request access, correction, or deletion where applicable law provides those rights.

We may need to retain certain information to comply with law, resolve disputes, enforce agreements, or maintain security.

To make a privacy request, email support@rivetsignal.com.

11. Children

RivetSignal is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided information to us.

12. International users

If you access the Service from outside the United States, you understand that information may be processed and stored in the United States or other countries where we or our providers operate.

Those locations may have different data protection laws than your jurisdiction.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version with a revised effective date and, where appropriate, provide additional notice.

Your continued use of the Service after changes become effective means you accept the updated policy.

14. Contact

Questions about this Privacy Policy can be sent to support@rivetsignal.com.

Postal or formal notices may be directed to Teleios AI, LLC, doing business as RivetSignal at the business address on file with the company.