Privacy Policy

Rivvo is an online booking product of Solutell LLC (“we”). This policy describes how we handle personal information when you use rivvo.io, create an account, or book an appointment through a business’s Rivvo page.

Our two roles

Rivvo holds two kinds of information, and our role differs for each.

For people who run a business on Rivvo, we decide what we collect and why, and this policy governs it directly.

For people who book an appointment, the business you booked with decides what is collected and why. We hold and process that information on the business’s behalf so it can run its bookings. If you want your details corrected or deleted, the business is the right first stop — though you can always contact us and we will help. We do not sell your information, and we do not use it to market to you on our own behalf.

Information we collect

From people who run a business: name, email, phone, password credentials, business name and address, staff and location details, catalog and hours, logo and photos, subscription and billing records, and support correspondence.

From people who book: name, phone, email, the appointment itself, an address where the service needs one, any note you add, your messaging preferences, and — where the business requires it — a record that your phone number was verified by a one-time code. If a business takes payment, its payment processor handles your card details; we do not receive or store full card numbers.

Automatically: IP address, device and browser type, pages viewed, and similar technical logs, which we use to keep the service running and secure and to detect abuse.

From other sources: if a business imports its details from another booking platform, we collect the business information, service list, and images it asks us to copy. We also look up addresses and time zones through a mapping provider so bookings land at the right local time.

How we use it

We use this information to run the product: signing you in, showing availability, taking and confirming bookings, sending appointment messages, processing subscriptions, providing support, and keeping the service secure. We use aggregated or de-identified data to understand and improve how Rivvo works. We do not sell personal information, and we do not use the personal information of a business’s customers to market anything of our own.

Text messages

A business can turn on text notifications for its booking page. When it is on, checkout shows an unchecked box asking whether you want reminders and updates by text. Ticking it is optional — you can book without it — and we text only the numbers where you ticked it yourself.

These messages are about your own appointment: confirmations, deposit instructions, reschedules, cancellations, and reminders. We do not send marketing or promotional texts. Message frequency varies — how many you receive depends on your appointments. Message and data rates may apply.

Reply STOP to any message to stop receiving them, or HELP for help. Stopping texts does not cancel your appointment, and the business can still reach you the way it otherwise would.

We share your mobile number with our messaging provider for the sole purpose of delivering these messages. No mobile information is sold or shared with third parties or affiliates for marketing or promotional purposes.

Who we share it with

Booking details are visible to the business you booked with. Beyond that, we share information with service providers who process it only to provide Rivvo, under contract and for no purpose of their own:

Supabase (database and authentication); Cloudflare (hosting, file storage, and bot protection); Stripe (subscription billing and, where a business enables it, customer payments); Twilio (text messages and phone verification); Resend (email delivery); Google Maps Platform (address lookup and time zones); Veriff (identity verification for businesses enabling payments); Apple (push notifications to the Rivvo app); and AI providers used to suggest wording for a business’s own service names and descriptions, which receive catalog text and not customer information.

We may also disclose information if the law requires it, to enforce our terms, to protect someone’s safety, or as part of a merger or sale of the business — in which case we will say so before your information becomes subject to a different policy.

Identity verification

A business that enables payments may have to verify its identity before it can be paid. That check is run by our verification provider and can involve a government-issued ID and a photograph, which are sensitive personal information. We use them only to complete the check and to meet our legal and payment-network obligations, never for advertising, and we do not use them to infer anything about you.

How long we keep it

We keep information for as long as the account is open and for as long as we need it for the purpose we collected it.

Appointment and booking records are kept while the business needs them for its own records. Billing and tax records are kept as long as the law requires, generally seven years. Security and technical logs are kept for a short period, generally under a year. Queued appointment messages are deleted once delivered or expired. When an account closes, we delete or de-identify what we no longer need, apart from what we must keep for legal, tax, or dispute reasons.

Security

We protect information with encryption in transit and at rest, access controls that limit staff access to what a task requires, per-business isolation enforced at the database level, and bot protection on public booking pages. Passwords are hashed and never visible to us. No system is perfectly secure, and we cannot guarantee absolute security, but we will notify you and any regulator as the law requires if a breach affects your information.

Your choices and rights

You can see and correct most of your information in the product. Business account holders can export their data and close their account. If you booked with a business, ask the business, or contact us and we will pass it on and help. You can stop texts by replying STOP, and you can unsubscribe from non-essential emails using the link in them.

Subject to the law, you can ask us to give you a copy of your information, correct it, delete it, or limit how we use it. We will not treat you differently for asking. We may need to verify your identity first, and we may keep information we are required to keep.

California privacy rights

If you live in California, the CCPA as amended gives you the right to know what personal information we collect and why, to get a copy of it, to correct it, to delete it, and to limit the use of sensitive personal information. You also have the right not to be discriminated against for exercising those rights.

In the last twelve months we have collected the categories described above: identifiers, contact and account details, commercial information about bookings and subscriptions, internet and device activity, approximate location derived from an address, and — for businesses enabling payments — government identification documents. We collect them for the purposes described in “How we use it”.

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We use sensitive personal information only to provide the service and for the other purposes the CCPA permits without an option to limit. To exercise a right, contact us using the details below. An authorised agent can act for you with proof that you gave them permission.

Cookies and similar technologies

We use cookies and similar storage that are necessary to run the product — keeping you signed in, remembering a booking in progress, and protecting pages from bots. We do not use advertising cookies and we do not run third-party ad trackers. Your browser can block cookies, though signing in will not work without the necessary ones.

Children

Rivvo is not for children. We do not knowingly collect personal information from anyone under 13, and account holders must be 18 or older. If a parent or guardian believes a child has given us information, contact us and we will delete it. Where an adult books an appointment for a child, the details are provided by the adult and belong to the business’s record of the appointment.

If you run a business on Rivvo

You decide what you collect from your customers and why, so you are responsible for giving them any privacy notice the law requires, for having a lawful basis to contact them, and for handling their requests. Our Terms of Service set out how that works between us. We will help you respond to a customer request, and we will tell you promptly if something affects your customers’ information.

Changes to this policy

We may update this policy. If a change materially affects how we handle your information, we will give reasonable notice — by email or in the product — before it takes effect, and update the date at the top.

Contact

Questions, or to exercise a privacy right: +1 (415) 725-2229, or write Solutell LLC, 2108 N St, Ste N, Sacramento, CA 95816, United States. See also our contact page.