Trust, transparency, and control for every deployment.

We follow a simple principle: You own your data. Rivtor processes it on your behalf. • We do not sell your data • We do not claim ownership of your business data • You control what data is connected and processed • You can request deletion of your data Rivtor operates as a data processor, while you remain the data controller.

Rivtor supports flexible deployment models to meet different trust and security requirements.

The environment at app.rivtor.com is a demo system. • Uses third-party infrastructure and services • Not fully isolated or enterprise-configured • Not recommended for sensitive or regulated data Production deployments are configured differently based on your requirements.

We implement industry-standard security measures, including: • Access control and authentication • Role-based permissions (where applicable) • Encryption in transit and at rest (where supported) • Monitoring, logging, and system observability We continuously improve our security practices as the platform evolves.

Rivtor may rely on trusted third-party providers for: • Cloud infrastructure • Databases and storage • AI / LLM processing • Analytics and monitoring We ensure: • Limited and necessary data access • Contractual safeguards • Transparency in usage Contact us for an up-to-date list of subprocessors.

Rivtor processes data in accordance with: • Data Processing Agreement (DPA) • Privacy Policy • Terms of Service We are structured as a data processor, meaning: • You determine how and why your data is used • We process data only to provide our services

Rivtor uses AI to analyze data and generate insights. Important considerations: • Outputs are based on available data and system logic • Results may not always be accurate or complete • Human review is recommended for critical decisions Rivtor is designed to assist decision-making, not replace it.

• Access to systems and data is restricted • Internal access is limited to necessary functions • In private deployments, access is governed by your infrastructure

• Data is retained only as long as necessary • Users may request deletion of their data • In private deployments, retention policies are controlled by the client

We are building Rivtor for serious businesses. That means: • Respecting your data • Giving you control over deployment • Being transparent about system behavior • Continuously improving security and reliability If you have specific requirements, we are open to working with you.