Privacy policy

Rivenly is a reporting tool that marketing agencies use to show their clients website analytics and search performance. Rivenly is operated by Hesed Marketing, LLC, doing business as Rivenly; "we" and "us" in this policy mean that company. It explains what information Rivenly handles, why, and the choices you have.

Who this covers

Rivenly has two kinds of users. Agencies create a workspace, connect a Google account and set up clients. Client users are people an agency invites to view the dashboards for one client. This policy covers both, as well as visitors to rivenly.xyz.

Information we collect

• Account details. Your name, email address and password. Passwords are handled by Google Firebase Authentication and are never stored in readable form.
• Workspace details. The agency's name, and for each client: a name, website address, time zone and the list of people invited to view it.
• Google Analytics data. When an agency connects a Google account, Rivenly receives the email address of that account, the names and IDs of the Google Analytics accounts and properties it can view, and aggregated report data for the properties the agency selects (for example sessions, users, page views, traffic sources, locations, devices and conversions).
• Google Search Console data. When the agency also allows it, Rivenly receives the list of Search Console sites that Google account can view, and aggregated search performance for the sites the agency selects (the search queries people used, the pages shown, and clicks, impressions, click rate and average position, by country and device).
• A Google access token. Google issues Rivenly a token that allows it to keep reading that Analytics and Search Console data. It is encrypted before it is stored.
• Access requests. If you ask for access on our website: your email address, agency name and the number of clients you report for.
• Basic technical records. Standard server logs (such as IP address, browser type and the pages requested) kept by our hosting providers for security and troubleshooting.

Rivenly sets one essential cookie that keeps you signed in, and remembers your light or dark mode choice in your browser. It does not use advertising cookies or third-party trackers.

How we use information

• To sign you in and keep your account secure.
• To build and display the dashboards an agency has set up, to that agency and to the client users it invited.
• To send emails you need to use the service: invitations, password resets and notices about your account.
• To reply when you contact us or ask for access.
• To keep the service working, find faults and prevent abuse.

Google user data

Rivenly requests two Google permissions beyond basic sign-in: view your Google Analytics data (the analytics.readonly scope) and view Search Console data for your verified sites (the webmasters.readonly scope). Either can be declined on Google's consent screen. It also reads the email address of the Google account so the connection can be labeled. Rivenly cannot change anything in Google Analytics or Search Console and cannot see other Google services such as Gmail or Drive.

How it is used. Analytics and Search Console data is used only to show reports inside Rivenly to the agency that connected the account and to the client users that agency invited for the matching client.

How it is stored. The Google access token is encrypted and kept where only Rivenly's servers can read it. Report results are cached so dashboards load quickly; each cached report expires six hours after it was fetched and is deleted, normally within a day of expiring.

Who it is shared with. Nobody, apart from the people described above and the infrastructure providers listed below, who process it on our behalf. Rivenly does not sell Google user data, does not use it for advertising, and does not use it to develop or train artificial intelligence or machine learning models. Our staff do not read it unless you ask us to for support, it is necessary for security, or the law requires it.

Rivenly's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Removing access. An agency can disconnect a Google account at any time from the Integrations page. Rivenly then revokes the token at Google and deletes its copy. You can also remove access from your Google Account permissions page.

Service providers

Rivenly relies on these providers to run. Each processes information only to provide its service to us.

• Google Cloud and Firebase: sign-in, and the database where workspace data is stored.
• Vercel: hosting for the website and application.
• Resend: delivery of invitation and account emails.

We may also disclose information if the law requires it, or as part of a merger or sale of the business, in which case this policy continues to apply to it.

How long we keep it

• Account and workspace information is kept while the account is open.
• Deleting a client removes that client's records, its cached reports and its users' access to it.
• Invitations expire after seven days.
• Access requests are kept until we have answered them, or until you ask us to remove yours.

To close an account and delete its data, email hello@rivenly.xyz. We act on deletion requests within 30 days.

Security

Connections to Rivenly are encrypted. Each agency's data is separated from every other agency's, and client users can only reach the clients they were invited to. No system is perfectly secure, so if you believe your account has been accessed without permission, tell us at hello@rivenly.xyz.

Your choices

You can ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it, by emailing hello@rivenly.xyz. If you are a client user, the agency that invited you controls your access and can also remove it. Depending on where you live, you may have further rights under local privacy law, and you can complain to your data protection authority.

Children

Rivenly is a business tool and is not directed at children under 16. We do not knowingly collect their information.

Changes to this policy

If this policy changes in a way that matters, we will update the date at the top and tell account holders by email before the change takes effect. See also our terms of service.

Contact

Questions about this policy or your information: hello@rivenly.xyz.