Privacy Policy
Last updated August 18, 2026
What we collect
Account details you give us (name, email, company info), the business data you put into Rivet (customers, price book, quotes, invoices, photos, notes), and technical basics needed to run the service (log data, device and browser information, IP addresses — including on quote acceptances, where the IP forms part of the signature record).
How we use it
To run the product: drafting quotes from your price book, sending documents to your customers on your behalf, syncing your books when you connect QuickBooks, processing payments through your Stripe account, and improving reliability. AI features process your data to produce drafts for you; your data is not used to train third-party foundation models.
Who processes it
Infrastructure and subprocessors we use to provide the service: Vercel (hosting), Supabase (database, authentication, file storage), Google (AI drafting, sign-in), Resend (email delivery), Stripe (payments, if you connect it), and Intuit (QuickBooks sync, if you connect it). Each receives only what their function requires.
Your customers’ data
The customer records you store in Rivet belong to your business; we process them on your instructions and never sell them or market to your customers.
Cookies
We use cookies for signing you in and keeping your session — no advertising trackers, no third-party analytics cookies.
Retention and deletion
Your data stays while your account is active. If you delete your account, company data is archived and then removed from live systems; backups age out on a fixed schedule. You can export your data at any time from Settings.
Your rights
You can access, correct, export, or delete your data. Depending on where you live you may have additional statutory rights; requests via any email from us are honoured to the extent the law provides.
Changes
Material changes will be announced in the product or by email before they take effect.