Privacy policy

1. What we collect

We collect account and contact information, content you provide or authorize us to access, connection credentials, and technical and usage information. Connected data may include account details, posts and performance metrics, including personal information made available by the source. Collection depends on the permissions you grant.

Our Google connection service is called Rivet Sources. When you connect a Google source, we access the following information with your permission:

• YouTube: Rivet uses YouTube API Services to read channel names and IDs, uploads playlist IDs, video IDs, titles and publication dates, and the view, like and comment counts returned by YouTube.
• Google Analytics 4: accessible account and property summaries, property IDs and names, time zones, and daily reports by default session channel group with dates, sessions, active users, page and screen views, and engaged sessions.

We store Google access and refresh tokens in encrypted form to maintain your authorized connections and run source updates.

2. How we use information

We use information to provide and maintain our services, perform requested analyses, support users and protect the service. Authorized connections are read-only and may sync repeatedly to maintain a history of your data.

We store imported Google data in your workspace for source inspection, questions and reports. Google connections use read-only access and support manual and scheduled updates. Rivet does not upload YouTube videos, post comments or change your Google Analytics settings.

We do not sell workspace information, use it for third-party advertising, or use it to train Rivet AI models.

Our legal basis, where required, is providing the requested service, consent, legitimate interests in operating and protecting our services, or legal obligations, as applicable.

3. Sharing and AI

In customer workspaces, private sources and reports are not automatically shared with your team. Shared sources and published reports are visible to members permitted by their sharing settings.

Service providers help us with hosting, sign-in, data connections and AI processing. When you request an AI analysis, relevant workspace content is shared with our AI provider, which may also process it for safety and abuse monitoring. Providers may process information outside your country under their own terms.

We limit workspace access through permissions. Authorized personnel may access information for support, maintenance or security. Information may also be disclosed when required by law or to protect legal rights.

4. Storage and deletion

We retain saved content to provide the service and preserve your work. Saved content and backups have no fixed automatic expiry.

Disconnecting stops future collection. Disconnecting or archiving a source does not erase saved data. Contact us to request deletion of saved information and related backups. Requests are handled individually after identity and authority checks, subject to applicable law and provider requirements. Information may be retained where lawfully needed for legal, security or dispute-resolution purposes.

We use access controls and encryption to protect information. No service can guarantee absolute security.

5. Your choices and rights

You control source permissions and can disconnect accounts, revoke access with the provider or pause supported sync schedules.

You can revoke Rivet Sources' access through your Google security settings. Disconnecting a source in Rivet and requesting deletion of saved data are separate actions; see Storage and deletion. Google's handling of information is described in the Google Privacy Policy.

Depending on applicable law, you may request access, correction, deletion or a copy of personal information, restrict or object to processing, withdraw consent, or contact a privacy regulator. Send requests to info@rivetfields.com. You do not need a Rivet account to make a privacy request.

6. Other information

Cookies and browser storage support sign-in, preferences and saved drafts. Signing out may leave local data; you can clear it in your browser settings. We do not add advertising trackers to the website.

Rivet is intended for professional use, not for children. Only provide information you are authorized to use.

We update this policy when our practices change and provide notice or obtain consent where required. Separate customer agreements continue to apply.