Privacy

Who we are

Rivendel is run by Rivendel Ltd, a company registered in England and Wales, at 86-90 Paul Street, London EC2A 4NE.

This page explains what information we collect, why, who we share it with, how long we keep it and the rights you have over it. It covers this website and the Rivendel service.

Two kinds of information

We handle two kinds of personal information, and the law treats them differently.

• Your own information, such as your name, your email address and what you pay. We decide how it’s used, so we’re responsible for it. The law calls us its controller.
• Your customers’ details, such as their orders, messages and your customer list, and anyone else who gets in touch with your business. We handle these on your behalf, only to run your business. You decide what happens to them. The law calls you the controller and us your processor.

We never use your customers’ details for our own purposes, such as training AI or advertising Rivendel. If you leave, they go with you. Our Terms set out the promises we make about them.

Every website we build for you has its own privacy page, which tells your customers who is responsible for their details and how to reach you.

What we collect

We collect only what we need to build and run your business. Most of it comes from you.

• Your account: your name, your email address and your password, stored in a form no one can read.
• Your idea: the one line you write, and your answers to our questions in Chat.
• Billing: Stripe handles your card, and we never see your full card number. Stripe tells us the card type, its last four digits, its expiry date and your billing address, and we keep a record of what you’ve paid.
• Your business: the photos and news you send us, by upload or in Chat, what you sell, your prices, your limits, your ad wallet and your decisions in your Monday update.
• What we make and how it does: the name, logo, website, posts, emails and ads we make for you, and the numbers that come back, such as visits, searches, sales and ad money spent.
• Accounts we run for you: when we set up or connect accounts such as Instagram, Facebook, TikTok, X or Google, we get the access we need to post and run ads, and the comments, messages and results those accounts show.
• Your customers’ details: their orders, messages and contact details. We handle these for you, as explained above.
• New leads: when we look for new customers for your business, the contact details of people and businesses who may want what you sell, from public sources.
• Messages between us: what you write in Chat or by email, and our replies.
• Technical details: your IP address, your browser and device, and which pages of our site you visit. We need these to run the site and keep it secure.

We don’t ask for sensitive information about you, such as your health, religion or politics.

You don’t have to give us anything, but we need your name, email address and a way to pay to build your business.

How we use it

UK and EU law says we need a lawful reason, called a legal basis, for each way we use personal information. We rely on four: contract (to give you what you signed up for), legitimate interests (to run Rivendel properly, in a way you’d expect), legal obligation (when the law requires it) and consent (when you’ve said yes).

• To create your account and let you sign in. Reason: contract.
• To build and run your business, including your website, posts, emails, ads, new leads and Monday update. Reason: contract.
• To take payment, collect sales and send you your money, and keep records. Reason: contract, and legal obligation for tax records.
• To answer your questions and tell you about changes to your account, your plan or this page. Reason: contract.
• To make Rivendel better, using your own information and never your customers’ details. Reason: legitimate interests.
• To keep Rivendel secure and stop fraud and misuse. Reason: legitimate interests.
• To meet our legal duties and deal with complaints or claims. Reason: legal obligation and legitimate interests.
• To send you news about Rivendel that isn’t about your account, only if you’ve asked. Reason: consent. Every one of these emails has a link to stop them.

Your customers’ details are used for one thing only: running your business, as you ask.

How we use AI

Software does the routine work, and people at Rivendel check what matters. Much of that software is AI from other companies, such as Anthropic, which makes Claude.

For each job, we send the AI provider only what that job needs. For example, to answer a customer’s email we send that email and what’s needed to reply, such as your prices and delivery times.

The provider uses it only to give us an answer. We only use AI providers that promise not to train their AI on what we send them.

AI can make mistakes, which is why people check the work. We never let software alone make a serious decision about you, such as closing your account.

Who we share it with

We share information only with companies that help us run Rivendel and your business, and each gets only what it needs:

• Payments: Stripe.
• AI providers: companies such as Anthropic.
• Hosting: Cloudflare, which hosts this website, and the companies that host Rivendel, your website and your business email.
• Fonts: this website’s lettering (Figtree, Instrument Sans and Milonga) is loaded from Google Fonts, so Google sees your IP address when the page loads.
• Your web address: the registrar. Registrars must be given the owner’s name and contact details; where privacy protection is offered, we switch it on.
• Social media and ads: Meta, TikTok, X and Google, when we post for you and run your ads. We don’t give them your customer list unless you say yes.

These companies must protect your information under their contracts with us. Some, like Stripe, Meta and Google, also use some of it for their own purposes, such as stopping fraud; their own privacy policies explain how.

We also share information with anyone you ask us to, with professional advisers who must keep it confidential, with authorities when the law requires it, and with a new owner if Rivendel is ever sold. We’d tell you first.

We never sell your information

We never sell or rent personal information, whether it’s yours or your customers’. We don’t share it so other companies can show adverts based on what people do on other websites and apps.

Your customer list belongs to your business. If you say yes to using it for your own ads, that’s your business’s choice, and your website’s privacy page tells your customers.

Sending information abroad

Rivendel is based in the UK. Some of the companies we work with are in the US or other countries, so your information may be handled outside the UK and Europe.

When that happens, we use one of the protections UK and EU law require: a country approved as protecting personal information properly (for a US company, the EU-US Data Privacy Framework and its UK extension), or approved contract terms called standard contractual clauses, with a UK addendum. Email us for a copy.

How long we keep it

• While your account is open, we keep what we need to run your business.
• When you leave, we hand everything over as our Terms explain, keep a copy for 90 days in case you come back, then delete it. Backups are deleted within a further 90 days.
• Billing records are kept as long as tax law requires, for example 6 years in the UK.
• Technical logs are kept for up to 90 days, unless we need them to look into a security problem.
• If you create an account but never start a business, we delete it after 12 months without use, and email you first.
• You can ask us to delete your information sooner. We will, apart from what the law makes us keep.

Keeping it safe

• Your information is encrypted when it travels over the internet and when we store it.
• Passwords are stored in a form no one can read, not even us.
• Only the people at Rivendel who need your information to do their job can see it.
• If something goes wrong that puts your information at risk, we put it right as fast as we can, tell the regulator where the law requires it, and tell you without delay if you could be affected.

Your rights in the UK and EU

If you’re in the UK or the EU, you can:

• See your information and get a copy.
• Correct anything wrong or incomplete.
• Delete it, apart from what the law makes us keep.
• Pause how we use it while something is checked.
• Object to uses based on legitimate interests, and always stop marketing emails.
• Take it with you, in a format other software can read.
• Change your mind about anything you’ve consented to.
• Complain to the regulator: in the UK, the Information Commissioner’s Office (ico.org.uk); in the EU, the data protection authority where you live or work.

Please tell us first if you’re unhappy, and we’ll do our best to put it right.

Your rights in the US and Canada

Some US states, such as California, and Canadian law give people rights over their personal information. Wherever you live, we give you the same rights: to know what we hold, get a copy, correct it, delete it, and opt out of its sale or use for targeted advertising (we don’t do either, so you’re already opted out).

We won’t treat you differently for using any of these rights, and you can ask someone you trust to make a request for you. If we say no, you can ask us to look again.

How to use your rights

Email us at team@rivendelapp.com. Tell us what you’d like and the email address your account uses. You don’t need any special words or form.

We may need to check it’s really you, usually by asking you to reply from your account’s email address. It’s free, and we answer within one month, or tell you why we need longer.

If you’re a customer of a business we run, your details belong to that business, so ask the business first. If you ask us, we pass your request on straight away and help them answer it.

Cookies

This website doesn’t use cookies for analytics or advertising. Our Cookies page explains exactly what it stores and why.

Children

Rivendel is for people 18 and over. We don’t knowingly collect information from anyone younger. If you think a child has given us their information, email us and we’ll delete it.

Changes to this page

When the way we handle information changes, we update this page and the date at the top. If a change matters to you, we email you at least 30 days before it takes effect. If a change needs your permission, we ask, and nothing changes until you say yes.

Contact us

Email team@rivendelapp.com about anything on this page. A person at Rivendel will answer.

Or write to Rivendel Ltd at 86-90 Paul Street, London EC2A 4NE.