LEGAL

Privacy Policy

Last Updated: March 24, 2026 · Effective Date: March 24, 2026

Rivo AI ("Rivo AI", "we", "our", or "us") is committed to protecting personal data and ensuring transparency in how information is collected, used, and processed.

Rivo AI operates as an AI-powered real estate platform and service provider, where our systems and agents directly manage customer communications, lead qualification, and property matching.

This Privacy Policy explains how we collect, use, process, and protect personal data.

1. Scope of This Policy

This Privacy Policy applies to:

  • Individuals interacting with Rivo AI via messaging platforms such as WhatsApp ("Users")
  • Business partners, property agents, and clients
  • Visitors to our platform and website

2. Our Role as Data Controller

Rivo AI acts as a Data Controller for personal data processed through its platform and services.

This means we determine how conversations are handled, how leads are qualified, how users are matched with properties, and how data is stored and used.

In certain cases, we may work with partners or agencies who may also act as independent or joint data controllers.

3. Information We Collect

Personal Information

  • Name
  • Phone number
  • Email address (if provided)
  • Location preferences
  • Property requirements

Communication Data

  • WhatsApp messages
  • Conversation transcripts
  • Interaction timestamps

Property Data

  • Property interests
  • Budget ranges

Technical Data

  • Device info
  • IP address
  • Usage logs

4. How We Use Your Information

We use the information we collect for the following specific purposes:

Service Provision

  • Provide instant AI-driven responses, manage lead qualification sequences, and negotiate appointment slots within WhatsApp and the platform
  • Provide, maintain, and improve our AI services
  • Process transactions and manage billing
  • Manage platform accounts and users
  • Authenticate users and prevent fraud
  • Provide customer support and technical assistance

Lead Management

Information extracted from conversations may be used to:

  • Create and update lead records
  • Track lead lifecycle stages
  • Assign lead scores or classifications
  • Enable visibility of leads within the platform dashboard

AI Improvement

  • Train and improve our AI models
  • Analyze usage patterns to enhance features
  • Develop new AI capabilities and services
  • Ensure AI safety and reliability

Communication

  • Send automated follow-ups and system notifications
  • Send service updates and notifications
  • Respond to customer support requests and inquiries
  • Share product news and feature announcements
  • Conduct surveys and gather feedback

5. Legal Basis for Processing

We process data based on:

  • User consent
  • Legitimate interests
  • Service performance
  • Legal obligations

6. Messaging and WhatsApp Communication

Users consent to communication by initiating contact or providing information.

7. Data Sharing

We may share data with:

  • Property agents and partners
  • Service providers
  • Legal authorities where required

8. International Data Transfers

Data may be processed in Singapore, Indonesia, Thailand, and Australia with appropriate safeguards.

9. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy:

  • Account Information: Retained while your account is active and for 30 days after deletion
  • Conversation History: Chat transcripts and lead data are retained to provide scoring history and context preservation, and it may be used for model training
  • Usage Data: Retained for up to 2 years for analytics and service improvement
  • AI Training Data: May be retained longer for model training, but anonymized when possible
  • Legal Requirements: Some data may be retained longer to comply with legal obligations

You can request earlier deletion of your data by contacting us, subject to legal and operational requirements.

10. Data Security and Protection

We implement industry-standard security measures to protect your information:

Technical Safeguards

End-to-end encryption for OAuth tokens and data isolated per organization to prevent cross-client access.

Service Providers

We may share information with trusted third-party service providers who assist us in operating our business:

  • Cloud hosting and infrastructure providers
  • Payment processors and billing services
  • Analytics and monitoring services
  • Customer support platforms

Legal Requirements

We may disclose information when required by law or to:

  • Comply with legal obligations or court orders
  • Protect our rights, property, or safety
  • Prevent fraud or security threats
  • Enforce our terms of service

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will:

  • Post the updated policy on our website
  • Update the "Last Modified" date
  • Notify you of material changes via email or service notifications
  • Provide a reasonable notice period before changes take effect

Your continued use of our services after the effective date constitutes acceptance of the updated policy.

12. Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction, subject to the same privacy protections.

13. Contact Us

If you have any questions regarding this Privacy Policy or our data practices, please contact us at support@rivoai.co