Draft
This Privacy Policy describes how Rivvol, Inc. ("Rivvol," "we") handles information through the Rivvol platform. It is written for the organizations that deploy Rivvol and the employees who use it, and, for schools, the educators and families who will use it in the education pilot (section 8).
Right now: the Rivvol product described below is not yet live. This website currently collects only what you submit through a waitlist form: name, email, company or organization, and, on some forms, your role or approximate headcount. If you book a conversation, scheduling is handled by Calendly, which collects the name, email, and answers you enter there under its own privacy policy. If you accept cookies on this site, we use Google Analytics 4 to measure aggregate traffic, such as page views, how visitors arrive, and time on site. Google processes that data under its own privacy policy, and nothing loads if you decline. See the Cookie Policy. The rest of this policy describes what the full product will collect once an organization is actively using it.
Account information (name, work email, role); Preference Profile responses (recognition style, feedback style, and similar), support settings (how they like feedback, recognition, and guidance), and any optional note to their manager, all answered voluntarily and editable; weekly Check-in scores and any optional support topics or note; Support Pings; workload information from the organization's own systems, such as volume projections; usage data needed to generate briefs and Suggestions; a home address, if the employee adds one, which is used only to estimate commute and only if they opt in; and, only where an organization enables it, compensation data used strictly for internal risk calculations. Rivvol also uses outside regional data, such as job postings and cost of living, which isn't about any one person.
Compensation data is never shown to a manager, never included in a brief or Suggestion, and never sent to any AI model. Home addresses are never visible to managers, HR, or anyone else at the organization, only referenced internally as general geography (a commute corridor, not a street address). Managers see how the people they lead like to be recognized and supported, including their support settings and any note written to them, but never their Check-in scores. HR can see Preference Profile answers across the organization so it can help. Support settings and notes to a manager stay between the employee and their manager. Employees are never shown their own Flight Risk Index or any risk score about themselves. A manager's Connection Rate Score, which shows how well their team's needs are being followed through on, is visible to that manager and to HR. It is not a rating of the manager as a person. Everything the system produces resolves into a Suggestion, not a rating.
To generate the Morning Brief and Suggestions, calculate the Connection Rate Score, route Support Pings, and provide the org-level views an organization has enabled (and an executive view, once it's available). We do not sell personal data, and we do not use employee data to train models outside the context of the organization that submitted it.
Who appears in a brief, and any risk levels, are decided by fixed rules, not AI. An AI model, Anthropic's Claude, then writes each suggested action, the reason behind it, and how urgent it is. To do that, it receives a person's first name, role, stated preferences, recent check-ins, workload, and risk level. It never receives compensation data, home addresses, or notes written to a manager. Rivvol's servers call the model; your device never does. We disclose this here rather than hiding it in the product.
Data is retained for as long as an organization's account is active, plus a limited period for legal and security purposes. Account deletion can be initiated in-app; full requests are honored per applicable law (GDPR/CCPA export and delete rights, where they apply).
Every organization's data is isolated at the database layer, not only in the interface. Access is role-based and audited. The app uses secure sign-in tokens to keep you signed in; they aren't used for tracking or advertising. Details on our security posture are available on request.
Depending on your location, you may have rights to access, correct, export, or delete your personal data. Contact support@rivvol.com to exercise these rights.
Rivvol for schools is in development and is not live. This section describes how student and family information will be handled once a school or district joins the pilot. Before any pilot begins, the school or district and Rivvol sign a student data privacy agreement. That agreement governs student and family data, and where it differs from this policy, the agreement controls.
What will be collected. Information the school provides to set up classes, such as a student's name, grade, and teachers. Parent and guardian accounts (name, email, and relationship to the student). Short notes families choose to share about how their child is doing. Notes, parent updates, and progress toward goals entered by teachers and authorized school staff, which can include notes related to a student's 504 plan, IEP, or behavior intervention plan (BIP).
Students never use the app. There are no student accounts, and Rivvol does not collect information directly from students. Student information comes from the school, its staff, and the student's own parents or guardians.
Who can see it. A student's notes and progress are visible only to that student's own parents or guardians and to the teachers and school staff the school authorizes to work with that student. Families never see information about other children. Among school staff, notes tied to a 504 plan, IEP, or BIP are limited to the people the school authorizes. Parents and guardians can see their own child's notes.
What we will never do with it. Student and family data is never sold, never used for advertising, never used to rate or evaluate a teacher, and never used to train AI models. It is kept separate from workforce data and used only to provide the service to that school.
The school stays in control. Rivvol handles student data on the school's behalf and under its direction. Parents and guardians can ask to review or correct their child's records through their school, and Rivvol will help the school respond. When the agreement ends, or when the school asks, student data is deleted or returned as the agreement specifies.
Questions about this policy: support@rivvol.com, Rivvol, Inc., Dallas, Texas.