Privacy Policy

The short version

• We collect what you type into our free-review form, any contract files you attach to it, a few technical details sent with it, and business contact details we use to email construction companies about our service.
• Our website doesn't set cookies or load advertising trackers.
• Contracts you send us are confidential. We use them only to prepare your review, and they are never used to train AI models.
• We don't sell personal information.
• Anyone can ask us to see, correct or delete the personal information we hold about them. Email [email protected].

Who we are

RivetData ("we", "us") builds and runs AI contract review for construction companies. This policy covers our website, rivet-data.com; the emails we send; and the RivetData Console, the product our customers use at console.rivet-data.com.

When a business uses the Console, the business decides what goes into it, and we handle that content for the business under our agreement with it. If that agreement says something different from this policy, the agreement applies.

What we collect

When you request a free contract review

The form asks for your name, work email, company, role, what kind of company you work for, the contract form you're working with, team size, timeline, and what you want to tell us about the contract. Some of these are optional. We also record which page you sent the form from.

Sent automatically with the form

When you submit the form, our server also records your IP address, your browser's user-agent string, and your approximate country, which our hosting provider works out from your IP address.

It also records how you found us, when that information is available: campaign tags in the link you followed (UTM parameters), an ad-click ID if you arrived from a Google, Microsoft or LinkedIn ad, the website that referred you, and the first page you visited and when. Your browser holds these details in session storage, which is cleared when you close the tab, and sends them to us only if you submit the form.

When you browse the website

Our website is hosted by Cloudflare. Like any web host, Cloudflare processes your IP address and basic request details to deliver pages and protect the site from abuse. We may also use Cloudflare Web Analytics, which counts page views without cookies. We also use Umami, a privacy-focused analytics service, to understand which pages are visited and how people move through the free-review form — for example, whether the form was started, submitted, or ran into an error. It records that a step happened, never what you typed. Umami doesn't use cookies, doesn't collect personal information, and doesn't track you across other websites.

The website doesn't set cookies. It stores two things in your own browser: your light or dark display setting, in local storage, and the "how you found us" details above, in session storage. You can clear both in your browser settings.

Business contact details for outreach

We email people at construction companies who may want contract review. For that, we collect business contact details, such as name, job title, company and work email address, from public sources such as company websites, public bid results, licensing databases and industry directories. Every outreach email includes an unsubscribe link. If you unsubscribe, we keep a record of your email address, when you opted out, and your browser's user-agent string, so that we don't contact you again.

When you email us

If you email us, we receive your message and the contact details in it. Our email runs on Google Workspace.

In the RivetData Console

If your organization gives you access to the Console, we process:

• Account details: your email address, how you sign in (email and password, or a Microsoft work account), and your workspace and role.
• Content: the contracts, other documents and photos your organization uploads, and what the service produces from them, including findings, summaries, redlines, and the questions you ask about a contract with their answers.
• Activity: who started each review and when, and the decisions reviewers record on each finding.
• Feedback: anything you send through the in-product feedback form, with the page you were on, your browser details and an optional screenshot.
• Technical logs: errors and diagnostic events linked to your account, which we use to find and fix problems.

How we use it

• To answer your request and prepare your free contract review.
• To run, support and secure the Console for our customers, and to fix problems.
• To send business emails about our service, with an unsubscribe link in every one.
• To see which pages and channels bring people to us, so we know where to spend our time.
• To block spam and abuse.
• To meet our legal obligations.

We don't sell personal information, and we never use contracts or other customer content to train AI models.

Contracts you send us

A construction contract carries pricing, terms and relationships you don't want passed around. Here is how we handle one:

• Confidential. We don't publish your contract or share it with anyone else, except the service providers listed below that store or process it for us, or when the law requires it.
• Used only for your review. A contract you send for a free review is used to prepare that review and to discuss it with you. A customer's contracts are used to provide the service the customer signed up for.
• Never used to train AI models.
• Read by an AI model, checked by people. Anthropic's Claude model reads the contract and drafts findings. People at RivetData may read it to run, check or support your review.
• Deleted when you ask. See How long we keep it.

Our Security page explains where contracts are stored and who can see them.

Who we share it with

We use these companies to run our website and product:

Provider	What it does for us	What it receives
Cloudflare	Hosts rivet-data.com, runs the form backend, and stores free-review requests, the contract files attached to them, and unsubscribe records.	Your form answers, the details sent with them, and the technical data that comes with any web request.
Google	Google Cloud (Firebase) runs the Console: sign-in, database, file storage, servers and logs. Google Workspace runs our email.	Console accounts and customer content; emails you exchange with us.
Anthropic	Provides the Claude AI model that reads contracts and drafts findings.	The documents it is asked to read, such as contracts, and the questions and notes users send to AI features in the Console.
Umami	Website analytics for rivet-data.com: which pages are visited, and how often a free review is requested.	The page address, the referring site, browser and device type, approximate country, and which steps of the free-review form were reached — without cookies, form contents or any personal information.
Resend	May email our team a notice of each free-review request.	Your form answers and how you found us.
Microsoft	Signs you in to the Console, only if you choose to use a Microsoft work account.	Your Microsoft sign-in, which Microsoft handles directly.
Public map services	Some energy-assessment features in the Console, not contract review, look up a project address with the U.S. Census Bureau's geocoder and public map layers hosted on Esri's ArcGIS Online.	A project address.

We also use an email-sending service for outreach. It receives the business contact details needed to send each message.

We may disclose information when the law requires it, to protect the rights or safety of RivetData, our customers or others, or as part of a merger, acquisition or sale of our business. In a sale, this policy will continue to apply to the information transferred.

Where it's stored

The Console's database and file storage are in Google Cloud data centers in the United States. Free-review requests and the contract files attached to them are stored with Cloudflare, which runs a global network. If you contact us from outside the United States, your information will be processed in the United States and in the other countries where our providers operate.

How long we keep it

• Free-review requests are kept until we delete them. They aren't deleted automatically. If you want yours deleted, ask us.
• Contracts sent for a free review are kept until you ask us to delete them.
• Unsubscribe records are kept so that we can keep honoring your request.
• Console content is kept while your organization uses the Console, unless it is deleted sooner. Workspace admins can delete a review in the Console; it disappears from view at once and an admin can restore it. When a customer asks, we delete reviews permanently, along with the uploaded files and the files generated from them. A customer's agreement with us can set different terms.
• Backups: we keep backups so that we can recover from data loss. Deleting something doesn't immediately remove it from those backups.

Your choices

• Stop outreach emails. Use the unsubscribe link in any of our emails, reply "unsubscribe", or email [email protected].
• See, correct or delete your information. Anyone can ask, wherever they live. Email [email protected] and tell us what you'd like. We may need to confirm that the request comes from you. We aim to reply within 30 days.
• Console users. Your organization controls your account and the content in its workspace, so we may pass your request to your organization's administrator or ask them to confirm it.
• Browser storage. You can clear what our website stores in your browser at any time, in your browser settings.

Security

We protect information with measures such as HTTPS on every page, access rules that keep each customer organization's data separate, and logs of key actions in the Console. No system is perfectly secure, so we can't promise that information will never be accessed without permission. Our Security page has the details. To report a vulnerability, email [email protected].

Children

Our website and services are for businesses. They aren't directed to children, and we don't knowingly collect personal information from anyone under 16. If you think a child has given us personal information, email [email protected] and we'll delete it.

Changes to this policy

If we change this policy, we'll post the new version on this page and update the effective date. If a change materially affects how we handle information we already hold, we'll also tell affected customers directly.

Contact

Questions or requests about privacy, or a security issue to report: [email protected].