Data Privacy Policy

Rivisoacts as a Data Fiduciary in relation to the Personal Data of users (“Data Principals”) who register for and use Riviso. This policy explains the notice, consent, purpose limitation, and rights framework the DPDP Act requires, and how we implement it in practice.

1. Notice and consent

Before or at the time we collect your Personal Data (for example, when you register), we provide notice of what we collect and why, in plain language, including through the consent checkbox on our registration form and this policy. We process your Personal Data on the basis of:

• Your consent — freely given, specific, informed, and unambiguous, for the purposes described in our Privacy Policy (account creation, providing the Service, and the integrations you choose to enable).
• Legitimate uses recognized under the DPDP Act, such as responding to a request you make (e.g. support), compliance with law, or purposes related to employment (not applicable to end users).

You may withdraw consent at any time with the same ease with which it was given, by deactivating integrations in Project Settings, deleting your account, or contacting support@riviso.com. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal, and may mean we can no longer provide the parts of the Service that depend on that data.

2. Purpose limitation

We collect and process Personal Data only for the specific, clearly stated purposes described in our Privacy Policy — operating your account, generating and publishing content you request, and the integrations you enable — and not for unrelated purposes without fresh notice and consent.

3. Data minimisation and accuracy

We collect only the Personal Data reasonably necessary for the stated purposes (for example, we do not require a phone number to use core features). You can review and correct your account information at any time in Profile settings.

4. Your rights as a Data Principal

Under the DPDP Act, you have the right to:

• Access a summary of your Personal Data and the processing activities we carry out on it.
• Correction and updating of inaccurate or incomplete Personal Data.
• Erasure of Personal Data that is no longer necessary for the purpose it was collected for — available directly from Profile settings (permanent account deletion) or by request.
• Grievance redressal — see Grievance Redressal for our process and response timelines.
• Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity, by writing to support@riviso.com.

We aim to acknowledge rights requests within 24 hours and resolve them within 15 days, consistent with the timelines expected under the IT Rules 2021 and DPDP Act framework.

5. Data breach notification

In the event of a Personal Data breach that could affect you, we will notify the Data Protection Board of India and affected Data Principals as required under the DPDP Act, including the nature of the breach, its likely consequences, and the measures taken or proposed to address it.

6. Cross-border transfer

The DPDP Act permits transfer of Personal Data outside India except to countries specifically restricted by the Central Government. Where our service providers (e.g. cloud hosting, database, AI processing) operate outside India, we transfer data to them only to provide the Service, under contractual safeguards, and consistent with applicable law.

7. Significant Data Fiduciary status

Riviso does not currently meet the volume/sensitivity thresholds that would classify it as a “Significant Data Fiduciary” under the DPDP Act. If that changes, we will appoint a Data Protection Officer and update this policy accordingly.

8. Grievance Officer

Grievance Officer: grievance@riviso.com
Registered address: [Registered business address to be added]
Full process and response timelines: Grievance Redressal.

9. Relationship to our general Privacy Policy

Where this Data Privacy Policy and our general Privacy Policy both address a topic (for example, what data we collect), they are intended to be consistent; this page adds India-specific rights and terminology required under the DPDP Act. If you notice an inconsistency, please tell us at support@riviso.com so we can correct it.