Privacy Policy
Version v1-2026-09-10 · Drafted for attorney review — probe stage. Rivlo is an early-stage project run by an individual operator in Bend, Oregon; these documents will be re-issued under the operating entity when it is formed. Questions: hello@rivlorents.com
1. What we collect
Booking and listing details you give us: name, email, phone number, requested dates, and the item involved. Messages you send through Rivlo to the other party on a booking. When the feature ships: condition photos taken at handoffs. Messages you send the operator. Our host also keeps standard server logs (IP address, browser user-agent) for security.
2. What we don't do
We don't sell or rent personal data. No advertising cookies, no cross-site trackers, no data brokers. The site currently sets no cookies at all; a login cookie will exist when accounts ship, and this policy will say so.
3. How we use it
To run bookings — including the deliberate part where, on acceptance, the renter and owner see each other's first name and phone number to arrange the handoff. To process payments, deposits, and identity verification. To send transactional email about your bookings and messages. To keep dispute and safety records.
4. Messages
Messages you send through Rivlo are stored on our servers and are visible to the other party on the booking and to the operator. The operator may read them to resolve a dispute, look into a safety or fraud concern, or respond to a legal request. A copy of each message is emailed to the recipient as a notification. Messages are kept with the booking's records.
5. The map and your location
The map shows approximate pickup areas, not addresses. If you tap "locate me," your browser's location is used only on your device to center the map; it is never sent to Rivlo. Map tiles load from OpenStreetMap's servers, which see your IP address the way any image request does; their handling of it is governed by the OpenStreetMap Foundation privacy policy.
6. Who processes it for us
Stripe (payments, payouts, identity verification), Resend (transactional email delivery), Cloudflare (hosting and logs), OpenStreetMap (map tiles), and Google Fonts (typefaces — Google's servers see your IP address when the fonts load). Each processes data under its own published terms. If a booking involves you and another user, that user necessarily sees the booking details and your messages on it.
7. How long we keep it
Booking, payment, message, and dispute records are kept while they're legally and operationally relevant (transaction records up to seven years). Everything else gets pruned when it's no longer needed.
8. Your choices
Email hello@rivlorents.com to ask what we hold about you, correct it, or delete it. We honor reasonable requests regardless of whether a statute obliges us to; data tied to an active or disputed booking may need to wait until it resolves.
9. If we run ads
If we run search ads, the ad network (e.g., Google) knows you clicked one. We don't run remarketing and we don't upload customer lists to ad platforms.
10. Age
Rivlo is for adults 18+. We don't knowingly collect data from anyone under 18.
11. Changes
Versioned and dated at the top. Material changes get noted here.