Privacy Policy

Last updated: August 19, 2026

This Privacy Policy describes how RIVL ("RIVL," "we," "us," or "our"), operated by BRIDGESTAG TECHNOLOGIES PVT LTD, collects, uses, stores, and shares information when you use our website (rivl.app) and our platform (app.rivl.app), together the "Service."

1. Who We Are

RIVL is a B2B competitive intelligence and sales enablement platform. Businesses that use RIVL ("Customers") upload or connect data — such as sales call transcripts and competitor information — which RIVL processes to surface objection-handling guidance and competitive insights to the Customer's own team.

Contact: founder@bridgestag.com · Bangalore, India

2. Information We Collect

Account information. When you sign in with Google, we receive your name, email address, and profile picture from your Google Account, as provided by Google's OAuth service. We use this solely to create and authenticate your RIVL account — we do not access your Gmail, Google Drive, Calendar, or any other Google service beyond this basic sign-in information.

Customer data. If your organization is a RIVL Customer, we process data your organization uploads or connects to the Service, including sales call transcripts, notes, deal records, and competitor-related information you choose to track.

Usage data. We automatically collect standard technical data — IP address, browser type, pages visited, and timestamps — to operate, secure, and improve the Service.

3. How We Use Google User Data Specifically

The only Google user data RIVL accesses is basic sign-in profile information (name, email, profile picture) via Google OAuth, used exclusively to:

• Create and authenticate your account

• Identify you within your organization's RIVL workspace

• Communicate with you about your account

We do not sell Google user data, use it for advertising, or share it with third parties except as necessary to operate the Service (e.g., our authentication provider, Supabase) as described below. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. How We Use Other Data

We use the data described above to:

• Provide, operate, and maintain the Service

• Process and analyze uploaded content (e.g., transcripts) to generate the intelligence and enablement features RIVL provides to your organization

• Communicate with you about your account or the Service

• Maintain security and prevent misuse

• Improve and develop the Service

5. How We Share Data

We do not sell personal data. We share data only with:

• Service providers who process data on our behalf under contractual confidentiality obligations, including our database/authentication provider (Supabase) and the AI providers we use to process content (e.g., Google Gemini, Anthropic, Groq), each solely for the purpose of delivering the Service's functionality.

• Your organization. If you're a member of a Customer's workspace, data you generate within the Service is visible to authorized members of that same organization, consistent with the Service's intended use.

• Legal requirements, if required by law, regulation, or valid legal process.

6. Data Retention

We retain data for as long as your account or your organization's account remains active, or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account data by contacting us at founder@bridgestag.com.

7. Data Security

We use industry-standard technical and organizational measures to protect data, including encryption in transit and access controls. No system is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have rights to access, correct, delete, or export your personal data, or to object to certain processing. To exercise these rights, contact us at founder@bridgestag.com. If you are located in the European Economic Area, United Kingdom, or India, you may have additional rights under applicable data protection law (e.g., GDPR, India's Digital Personal Data Protection Act).

9. Children's Privacy

The Service is intended for business use by adults and is not directed to individuals under 18. We do not knowingly collect data from children.

10. International Data Transfers

Your data may be processed in countries other than your own, including India and the United States. Where required, we take steps to ensure such transfers comply with applicable data protection law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, for material changes, provide additional notice as appropriate.

12. Contact Us

Questions about this Privacy Policy or your data can be directed to: founder@bridgestag.com