Privacy Policy

1. What we collect

Booking and listing details you give us: name, email, requested dates, and the item involved. A phone number only if you add one to your profile; a booking never asks for it. A photo of yourself — every renter adds one before requesting and every owner before publishing, so the two of you know who to look for at the handoff. Messages you send through Rivlo to the other party on a booking, and messages you send the operator. Condition photos taken at pickup and return. From the iPhone app: a push-notification token for your device, and usage events (screens opened, searches, errors) tied to listing, booking and conversation ids. Our host also keeps standard server logs (IP address, browser user-agent) for security.

2. What we don't do

We don't sell or rent personal data. No advertising cookies, no cross-site trackers, no data brokers. The site sets one cookie that keeps you signed in and a short-lived one while you sign in — nothing else.

3. How we use it

To run bookings — including the deliberate part where, on acceptance, the renter and owner see each other's first name and photo and arrange the handoff in the booking's message thread. A phone number you add to your profile is for Rivlo only and is never shown to the other party. To process payments, deposits, and identity verification. To send transactional email about your bookings and messages. To keep dispute and safety records.

4. Messages are not private

Messages you send through Rivlo are not private between you and the other party. They are stored on our servers, visible to the other party on the booking and to the operator, and kept with the booking's records (Section 7). The operator may read them to resolve a dispute, look into a safety, theft or fraud concern, respond to a report, or answer a legal request. We keep them for exactly that reason: they are the record of what was agreed and what happened, which protects both people when gear goes missing or comes back damaged. A copy of each message is emailed to the recipient as a notification, unless they have turned message e-mails off in their settings.

5. The map and your location

The map shows approximate pickup areas, not addresses. If you tap "locate me," your browser's location is used only on your device to center the map; it is never sent to Rivlo. If you list gear and place a pickup pin (by tapping the map or using your device's location), the coordinates you choose are stored with your listing. Renters see only an approximate area; the exact pin is shared with a renter once you accept their booking, for the handoff. Map tiles load from OpenStreetMap's servers, which see your IP address the way any image request does; their handling of it is governed by the OpenStreetMap Foundation privacy policy.

6. Who processes it for us

Stripe (payments, payouts, identity verification), Resend (transactional email delivery), Cloudflare (hosting and logs), OpenStreetMap (map tiles), and Google Fonts (typefaces — Google's servers see your IP address when the fonts load). Each processes data under its own published terms. If a booking involves you and another user, that user necessarily sees the booking details and your messages on it.

7. How long we keep it

Booking, payment, message, and dispute records are kept while they're legally and operationally relevant (transaction records up to seven years). Everything else gets pruned when it's no longer needed.

When an account is named in a theft report, a damage or deposit claim on a booking, or a dispute, the records of that booking and its conversation — messages, condition photos, booking details, and the account's identity details — are kept until the matter is settled, however long that takes, even if the account is deleted. We may give them to law enforcement when it makes a lawful request, or when there is a credible risk to someone's safety. Once it's settled, they're deleted on the normal schedule. If a theft report is upheld, the account and those records are kept.

8. Your choices

Delete your account yourself — Profile › Settings › Delete account in the app, or rivlorents.com/account/delete on the web: your email, name, phone, photo, settings, conversations and reviews go at once; a rental under way finishes first and the deletion runs the day it closes; if you still have rented gear when you ask, your account is frozen at once and the deletion runs a week after the rental is due back (or when it closes, if later), so the owner can report it if the gear doesn't come back. Booking records stay without your name; if a theft report, a damage or deposit claim on a booking, or a dispute names your account, that booking's records are kept until it's settled (Section 7). Email hello@rivlorents.com to ask what we hold about you or to correct it; we honor reasonable requests regardless of whether a statute obliges us to.

9. If we run ads

If we run search ads, the ad network (e.g., Google) knows you clicked one. We don't run remarketing and we don't upload customer lists to ad platforms.

10. Age

Rivlo is for adults 18+. We don't knowingly collect data from anyone under 18.

The first time you sign in we ask your date of birth. We use it once to check your age and don't store it; we keep only that you confirmed you're 18 or older. On an iPhone, where the law calls for it, we may ask Apple to share your age range, and we use it the same way. When Stripe Identity verifies a Renter's ID, we keep the birth year from it.

If we learn an account belongs to someone under 18, we close it and delete its personal information — at once, or within a week when bookings or conversations are behind it.

11. Changes

Versioned and dated at the top. Material changes get noted here.