1. Who this policy covers
Rivio is a product of Softwright, a business registered in the Netherlands. Softwright is responsible for the account, licensing, billing-administration, and support information it processes to operate Rivio. References to “Rivio”, “we”, and “us” mean Softwright, operating Rivio at rivio.tech. Contact support@rivio.tech for privacy questions or requests.
This policy covers Rivio’s website and software. Roblox, your AI assistant, payment services, and optional creative providers also process information under their own policies when you use their services.
2. Information we process
Account information: your email address, account identifier, authentication records, and account preferences. Authentication is handled by our account service, including password or email-link sign-in, session management, and account recovery.
Subscription information: your billing customer identifier, purchased plan, subscription status, renewal and cancellation dates, transaction references, and payment-event records. Stripe handles payment details entered at checkout; Rivio’s application does not receive your full card number or security code.
Device and license information: an installation or device identifier, the device name you provide, activation requests, approved devices, first and most recent activity times, revocation status, and license verification records. These records let us activate your devices, enforce personal licenses, and respond to unauthorized use.
Technical and security information: service requests, timestamps, errors, network information such as IP addresses, and authentication or licensing events. Our hosting and account providers may also keep operational and security logs. Activation rate limiting uses a salted representation of an IP address.
Support information: messages, error reports, screenshots, or files that you choose to send us. Please remove secrets and unrelated personal information before contacting support.
3. Your projects and connected tools
Rivio works with project files and connected applications on your computer. Account activation and license verification use account and device information; they do not require uploading your entire project to Rivio’s account service.
When you connect an AI assistant, it can request project context, source code, tool results, and screenshots through Rivio. Your assistant may send that information to its AI provider. What it retains and whether it uses data to improve its services depend on your provider, plan, and settings.
If you enable ElevenLabs generation, the relevant prompts, speech text, voice choices, and generation settings are sent to ElevenLabs using your configured key. That key is stored using VS Code’s secret storage. Generated files are saved locally; uploading assets to Roblox is a separate action.
When you connect Roblox with OAuth, Roblox handles sign-in and consent. Rivio stores access and refresh tokens in VS Code SecretStorage and uses them for authorized account and publishing requests. Publishing sends the selected asset content and metadata to Roblox. Disconnect Roblox in Assets to remove the local connection; previously uploaded assets remain on Roblox.
Blender and Roblox workflows can read and modify the files, scenes, and assets you select. Only connect projects and providers you are authorized to use, and review your assistant’s permissions.
4. Why we use information
We use information to create and authenticate accounts, provide paid access, activate and revoke devices, process and reconcile subscriptions, deliver service messages, troubleshoot problems, respond to support requests, prevent fraud and account sharing, and meet legal obligations.
Where data-protection law requires a legal basis, we rely on performance of our contract for accounts, licensing, and subscription services; legal obligations for required financial records and lawful disclosures; and legitimate interests for proportionate security, abuse prevention, and service reliability. We balance these interests against your rights.
Where an activity requires consent, we request it separately. You can withdraw consent for that activity without affecting processing already lawfully carried out. We do not make optional marketing consent a condition of buying Rivio.
5. Who receives information
We use service providers to host the website, authenticate users, store account and licensing records, process payments, and deliver communications. Hosting providers process technical and security information needed to operate the website. Supabase provides authentication and account services, and Stripe handles payments and subscription management.
Providers receive information relevant to their role and may process certain information for their own security, legal, and payment obligations. Optional providers, such as your chosen AI assistant, ElevenLabs, and Roblox, receive information when you use their integrations.
We may disclose information where legally required, to protect people or the service, to investigate fraud or misuse, or in connection with a business transfer subject to appropriate confidentiality and applicable law. We do not sell your personal information or use project content for advertising.
6. Cookies and browser storage
The website uses browser storage and authentication technologies to keep you signed in and support account functionality. Hosting and payment providers may use cookies or similar technologies for security, access control, fraud prevention, and checkout.
The Rivio website does not include an advertising or cross-site tracking integration in its current application code. If we introduce optional analytics or marketing technologies that require consent, we will explain them and obtain consent before enabling them.
You can clear site storage or restrict cookies in your browser. Doing so may sign you out or prevent account and payment features from working.
7. How long we keep information
We retain account and subscription records while needed to provide your account and administer your purchases. Device records are retained while needed to manage activation, revocation, security, and related disputes. Expiry of an activation code or revocation of a device stops its use; it does not necessarily immediately erase the associated record.
We retain financial records for applicable accounting and tax requirements, support correspondence for resolving and documenting requests, and security records for investigating abuse and protecting the service. Retention is determined by the record’s purpose, applicable legal requirements, and any unresolved dispute; information is not kept solely because storage is available.
When information is no longer necessary, we delete or anonymize it. Backup copies may remain until their normal replacement cycle and are not used for ordinary service operations. You can request account deletion through Contact; we will explain any records we must retain and why.
Files stored on your own computer remain under your control. Deleting a Rivio account does not delete those files or information held separately by Roblox or your chosen AI and creative providers.
8. International processing and security
Our service providers may process information outside your country. Where applicable law restricts an international transfer, we use the relevant lawful transfer mechanism, such as an adequacy decision or approved contractual safeguards. Contact us for information about safeguards relevant to your data.
We use access controls, authenticated connections, protected credential storage, and other measures appropriate to the service. No online service or device can be guaranteed completely secure. Protect your sign-in details and revoke devices you no longer recognize or use.
9. Your choices and rights
Depending on your location, you may have rights to access, correct, delete, or receive a portable copy of your personal information; restrict or object to processing; withdraw consent; and complain to your local data-protection authority. You may object to processing based on legitimate interests, including direct marketing where applicable.
Send a request through Contact using the email associated with your account where possible. We may ask for proportionate information to verify your identity. We respond within the time required by applicable law and explain any lawful limitation. You do not need to buy or renew a subscription to exercise privacy rights.
You can manage subscription renewal through your billing portal and revoke connected devices in Account. Account deletion and subscription cancellation are different requests; tell us if you want both.
You can also lodge a complaint with the Dutch data-protection authority, Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl, or with your local supervisory authority.
10. Age requirements
Rivio is not directed to children under 13 or under a higher minimum age required by local law. Where a user cannot enter a binding contract independently, a parent or legal guardian must authorize their use and purchase.
If you believe a child has supplied personal information without appropriate authorization, contact us so we can investigate and take the required action.
11. Changes and contact
We may update this policy when the service or our processing changes. The effective date appears above. We will provide additional notice of material changes where required and seek consent if a new purpose requires it.
Use the Contact page for privacy questions, requests, or concerns. Include “Privacy” in your message subject and avoid sending passwords, API keys, or full payment details.