Privacy Policy

This Privacy Policy explains how Ryvo handles your personal data, in line with Brazil's General Data Protection Law (LGPD) and, where applicable, the General Data Protection Regulation (GDPR). The controller is the operator of Ryvo, reachable at ryvoprocontato@gmail.com.

1. Data we collect

• Sign-up: your email and password (stored encrypted by the authentication provider).
• Content you enter: services, contacts, notes, reviews, finance entries and reminders you create in the app.
• Subscription data: plan status and subscription identifiers received from the payment processor.
• Minimal technical data: information needed to keep your session and run the service.

2. How we use your data

We use your data to authenticate your access, provide and maintain the service, process your subscription and communicate essential account information. We do not use your data for third-party advertising.

3. Legal basis

We process your data based on performance of the contract (to provide the service you signed up for), on your consent (where applicable) and on our legitimate interest in operating and protecting the service.

4. Who we share with

We do not sell your data, and there is no sharing of data between Ryvo users. We share only with providers that operate the service on our behalf:

• Supabase: database and authentication (hosting of your data).
• Vercel: hosting and delivery of the app.
• Lemon Squeezy: payment processing as merchant of record.

5. International transfer

These providers may process data on servers located outside Brazil. By using the service, you acknowledge that your data may be processed internationally, always with adequate safeguards.

6. Cookies

We use only essential cookies to keep your login session and your preferences. We do not use advertising tracking cookies.

7. Retention and deletion

We keep your data while your account exists. You may request deletion of your account and data at any time through the contact email. Some records may be kept for as long as required by law.

8. Security

Data is transmitted encrypted, and each account is isolated by row-level access control in the database, so one user never accesses another user's data. No system is fully immune to risk, but we take reasonable protective measures.

9. Your rights

You may request access, correction, deletion and portability of your data, and withdraw consent. To exercise any right, write to ryvoprocontato@gmail.com.

10. Minors

Ryvo is not intended for people under 18, and we do not knowingly collect data from minors.

11. Changes

We may update this policy from time to time. The last updated date is shown at the top of this page.

12. Contact

For privacy questions, write to ryvoprocontato@gmail.com.