Rivveo Privacy Policy

1. Introduction

Axamattic Limited ("we", "us", "our", or "Axamattic") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Rivveo design and prototyping service, including any related websites, applications, or services (collectively, the "Services").

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Services. By accessing or using our Services, you consent to the collection, use, and disclosure of information in accordance with this Privacy Policy.

We are a data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our registered office is at 4th Floor, Silverstream House, 45 Fitzroy Street, Fitzrovia, London, England, W1T 6EB. Our company registration number is 15570389.

2. Information We Collect

3. How We Collect Information

4. How We Use Your Information

We use the collected information for various purposes, including to:

• Provide, maintain, and improve our Services
• Process and complete transactions
• Send transactional messages, including confirmations, invoices, technical notices, updates, security alerts, and support messages
• Respond to comments, questions, and requests and provide customer service
• Communicate with you about products, services, offers, promotions, and events, and provide news and information we think will be of interest to you
• Monitor and analyze trends, usage, and activities in connection with our Services
• Detect, investigate, and prevent security incidents and other malicious, deceptive, fraudulent, or illegal activity
• Debug to identify and repair errors in our Services
• Personalize and improve the Services, including providing or recommending features, content, and advertisements
• Facilitate AI-powered features through our integration with AWS
• Carry out any other purpose described to you at the time the information was collected

5. Legal Basis for Processing

Under the UK GDPR, we process your personal information based on one or more of the following legal bases:

6. Information Sharing and Disclosure

7. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, or to resolve disputes.

When determining the appropriate retention period, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the personal information, and whether we can achieve those purposes through other means, as well as applicable legal requirements.

In some circumstances, we may anonymize your personal information (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

After account termination, we will retain your data for a period of 90 days, after which it may be permanently deleted.

8. Data Security

We have implemented appropriate technical and organizational measures to protect the security of your personal information. However, please be aware that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

Your account information is protected by a password. It is important that you keep your password secure. Do not share your password with anyone. We will never ask for your password via email, phone, or text. If you believe your password has been compromised, please change it immediately and contact us.

9. Data Storage and International Transfers

Your information is stored on servers located in the United Kingdom. However, due to the global nature of our business, we may need to transfer your personal information to other countries, including countries outside the UK or the European Economic Area (EEA).

When we transfer personal information outside the UK or EEA, we ensure a similar degree of protection is afforded to it by implementing appropriate safeguards, such as:

• Using specific contracts approved by the UK Information Commissioner that give personal data the same protection it has in the UK (known as the "International Data Transfer Agreement" or "IDTA")
• Transferring data to countries that have been deemed to provide an adequate level of protection for personal data by the UK government
• Where we use providers based in the US, we may transfer data to them if they are part of the UK Extension to the EU-U.S. Data Privacy Framework

10. Cookies and Tracking Technologies

We and our third-party partners use cookies and similar tracking technologies to track activity on our Services and to hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier.

We use the following types of cookies:

• Essential Cookies: Necessary for the Services to function and cannot be switched off.
• Performance/Analytics Cookies: Allow us to recognize and count visitors and see how they move around our website.
• Functionality Cookies: Recognize you when you return to our Services and enable us to personalize content for you.
• Targeting Cookies: Record your visit to our Services, the pages you visit, and the links you follow.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Services.

11. Your Rights

Depending on your location, you may have certain rights regarding your personal information. Under the UK GDPR, you have the following rights:

• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
• Right to Erasure: You have the right to request that we delete your personal information in certain circumstances.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal information in certain circumstances.
• Right to Data Portability: You have the right to request that we provide you with a copy of your personal information in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to our processing of your personal information in certain circumstances.
• Right to Not Be Subject to Automated Decision-making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

To exercise any of these rights, please contact us using the details provided in the "Contact Information" section below. We may need to request specific information from you to help us confirm your identity.

12. Children's Privacy

Our Services are not intended for use by children under the age of 18, and we do not knowingly collect personal information from children under 18. If we learn we have collected or received personal information from a child under 18 without verification of parental consent, we will delete that information.

13. AI Integration Specifics

Our Services integrate with AWS

• Your prompts and inputs to these AI models may be processed by AWS and Anthropic
• Your data may be used to improve the AI models in accordance with AWS Bedrock and Anthropic's terms of service

14. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. If we make material changes to this Privacy Policy, we will notify you either through the email address you have provided us or by placing a prominent notice on our website.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

15. Data Protection Officer

We have appointed a Data Protection Officer (DPO) who is responsible for overseeing questions in relation to this Privacy Policy. If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please contact our DPO using the details provided below.

16. Contact Information