RivramThis Privacy Policy explains how Rivram, Inc. ("Rivram", "we", "us", or "our") collects, uses, discloses, and safeguards your information when you use our expense-management and bookkeeping application, websites, and related services (collectively, the "Service"). By using the Service, you agree to the practices described here. If you do not agree, please do not use the Service.
1. Information we collect
We collect the following categories of information:
- Account information. Your name, email address, password (stored hashed, never in plain text), business or entity names, and authentication identifiers when you sign in (for example, via Google OAuth).
- Financial data. Transaction history, account balances, account names, categories, and similar data retrieved from financial institutions you connect through trusted third-party aggregators. These connections are read-only — Rivram cannot move, transfer, or withdraw funds.
- Receipts and documents. Images, PDFs, and files you upload or email in, along with data extracted from them (merchant, amount, date, tax).
- Usage data. Log data, device and browser information, IP address, and interactions with the Service, used to operate, secure, and improve it.
- Communications. Messages, support requests, and feedback you send us.
2. How we use your information
We use your information to:
- Provide, maintain, and operate the Service, including AI-assisted categorization and bookkeeping.
- Automatically categorize transactions and surface review suggestions with confidence scores.
- Generate financial statements, reports, and exports you request.
- Send service-related communications, such as transaction digests and security notices.
- Detect, prevent, and respond to fraud, abuse, and security incidents.
- Comply with legal obligations and enforce our Terms & Conditions.
We do not sell your personal or financial data, and we do not use your financial data to train third-party advertising models.
3. How we share information
We share information only in these limited circumstances:
- Service providers. With vendors who help us run the Service — such as cloud hosting, financial-data aggregators, email delivery, and AI processing — under contracts that require them to protect your data and use it only on our instructions.
- At your direction. When you export data or share books with an accountant or collaborator you choose.
- Legal reasons. When required by law, regulation, legal process, or to protect the rights, safety, and property of Rivram, our users, or the public.
- Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this Policy.
4. AI processing
Rivram uses artificial-intelligence models to categorize transactions, read receipts, and assist with bookkeeping. Where third-party AI providers process your data, they do so under agreements that prohibit using your data to train their models and require appropriate confidentiality and security safeguards. AI suggestions are provided as assistance only and should be reviewed before being relied upon.
5. Data retention
We retain your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we delete or anonymize your personal and financial data within a reasonable period, except where retention is required by law.
6. Security
We use technical and organizational measures designed to protect your information, including encryption in transit, hashed credentials, access controls, and read-only bank connections. No method of transmission or storage is perfectly secure, however, and we cannot guarantee absolute security.
7. Your rights and choices
Depending on your location, you may have the right to:
- Access, correct, or delete your personal information.
- Export your data in standard formats, available on every plan.
- Object to or restrict certain processing.
- Withdraw consent where processing is based on consent.
To exercise these rights, contact us using the details below. You may disconnect a financial account at any time from within the Service.
8. International users
Rivram is operated from the United States, and your information may be processed in the United States and other countries where we or our service providers operate. These jurisdictions may have different data-protection laws than your own.
9. Children's privacy
The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can delete it.
10. Changes to this Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Your continued use of the Service after changes take effect constitutes acceptance.
11. Contact us
If you have questions about this Privacy Policy or our data practices, contact us at privacy@rivram.app.