Privacy Policy.

This Privacy Policy explains how Rive Network (“Rive,” “we,” “us,” or “our”) collects, uses, and shares information when you use our Services at joinrive.com. Rive Network is operated by Touloun Enterprises LLC, a Delaware limited liability company, which acts as the data controller for the personal information described in this Policy.

We believe privacy is foundational to trust. We collect only the information we need to provide thoughtful introductions, we handle it carefully, and we give you control over your information.

Information you provide:

• Application information — answers to our application questions, demographic information, preferences
• Profile information — photos, biographical details, career information, education, personal bio
• Onboarding questionnaire — detailed responses about what you’re looking for, values, and dealbreakers
• Curation preferences — ongoing updates you make to guide our team
• Feedback — responses to post-introduction feedback prompts
• Communications — emails you send us and messages you submit through our Services
• Payment information — payment details are collected and processed by Paddle, our Merchant of Record; we do not store full card numbers

Information collected during identity verification:

• Identity verification is performed by a third-party verification provider
• You provide a photo of a government-issued ID and a selfie
• Rive receives only the verification result (pass/fail) and basic identity attributes
• We do not store your ID document or selfie

Information collected automatically:

• Usage data — pages visited, features used, approximate timestamps
• Device information — browser type, operating system, general location (city/country level)
• Cookies and similar technologies — used for essential site functionality and analytics

Information from third parties:

• Merchant of Record (Paddle) — transaction data, billing status, refund and chargeback information
• Identity verification provider — verification results
• Email service provider (Resend) — email delivery and engagement data

We use your information to:

• Review your application and determine membership eligibility
• Verify your identity through our third-party provider
• Create curated introductions between members
• Facilitate connections between members who have indicated mutual interest
• Communicate with you about your membership, introductions, and service updates
• Improve our curation based on feedback and outcomes
• Process payments and manage your subscription
• Maintain the safety of our community
• Comply with legal obligations and enforce our Terms of Service

With other members (limited):

• When we make an introduction, we share your first name, photo, and selected profile details with the matched member
• If both members indicate mutual interest, contact information you’ve chosen to share is exchanged
• You control what contact information is shared at the moment of mutual interest

With service providers:

We share information with trusted third parties who help us operate Rive:

• Paddle (Merchant of Record) — handles the sale of our products, payment processing, billing, subscription management, tax compliance, refunds, and invoicing
• Identity verification provider — confirms your identity
• Resend — email delivery
• Supabase — database hosting and infrastructure
• Cloud hosting providers — secure data storage

These providers are contractually required to protect your information and use it only for the purposes we specify.

For legal reasons:

We may share information if required by law, to respond to legal process, to enforce our Terms, or to protect the rights, safety, or property of Rive, our members, or the public.

In business transfers:

If Rive transitions to a different business structure or is acquired, your information may be transferred as part of that transition. We will notify you before your information becomes subject to a different privacy policy.

What we never do:

• We do not sell your personal information to third parties
• We do not share your information with advertisers
• We do not display third-party ads within our Services
• We do not share your profile with anyone other than members we have matched you with

Access and correction. You can view and update most of your information through your member dashboard. For information you cannot edit directly, contact us at hello@joinrive.com.

Deletion. You can request deletion of your account and associated data by contacting us or using the cancellation process in your dashboard. After cancellation, we will delete or anonymize your information within 90 days, except where we are required to retain it for legal or legitimate business purposes.

Marketing communications. We do not send marketing communications without your consent. Service-related emails (introductions, billing, account updates) are sent as part of your membership.

Data portability. You may request a copy of your personal information in a machine-readable format.

Do Not Track. Our Services do not respond to Do Not Track signals, but we do not track you across third-party websites.

We retain your information for as long as your membership is active and for a reasonable period afterward to:

• Allow you to reactivate your membership
• Comply with legal obligations
• Resolve disputes
• Enforce our Terms

Typical retention periods:

• Active members — for the duration of membership plus 12 months
• Canceled members — 90 days after cancellation, then deleted or anonymized
• Payment records — retained for 7 years for tax and legal compliance
• Identity verification results — retained for the duration of membership plus 24 months for safety purposes

We use reasonable administrative, technical, and physical safeguards to protect your information, including:

• Encryption in transit (HTTPS) and at rest
• Access controls limiting access to personal information
• Regular security reviews
• Secure payment processing through PCI-compliant providers

No system is perfectly secure. While we take reasonable precautions, we cannot guarantee the absolute security of your information. You use our Services at your own risk.

Rive is not intended for anyone under 18. We do not knowingly collect information from individuals under 18. If we learn we have collected information from a minor, we will delete it promptly.

Rive is operated from the United States. If you access Rive from outside the U.S., your information will be transferred to and processed in the U.S. By using Rive, you consent to this transfer.

For members in the European Economic Area (EEA) or UK: You have additional rights under GDPR, including the right to access, correct, delete, restrict processing, and data portability. The legal basis for our processing is typically (a) contract performance, (b) legitimate interests, or (c) your consent.

For California residents: You have rights under the California Consumer Privacy Act (CCPA), including the right to know what information we collect, the right to request deletion, and the right to opt out of the sale of personal information (we do not sell personal information).

We use a minimal set of cookies and similar technologies:

• Essential cookies — required for core site functionality (login, security)
• Analytics cookies — help us understand how our Services are used

You can control cookies through your browser settings. Disabling essential cookies may affect your ability to use some features.

Our Services may contain links to third-party sites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies.

We may update this Privacy Policy from time to time. When we do:

• We will update the “Effective date” at the top
• We will notify you by email when changes are material
• We will post the revised Policy on our Site

Continued use of Rive after changes take effect constitutes acceptance of the updated Policy.

Questions about this Privacy Policy? Contact us at:

Touloun Enterprises LLC (operating as Rive Network)
Email: hello@joinrive.com

For data rights requests (access, deletion, correction), please include “Privacy Request” in your subject line.