Rivelo Privacy Policy

This Privacy Policy describes how Rivelo LLC (“Rivelo,” “we,” “us,” or “our”) collects, uses, discloses, stores, and otherwise processes personal information in connection with the websites located at gorivelo.com and rivelopay.com, the Rivelo platform, and any related products, services, applications, communications, or features we make available from time to time (collectively, the “Services”).

By accessing or using the Services, submitting information to Rivelo, creating or using an account, or otherwise interacting with us, you acknowledge the practices described in this Privacy Policy. If you are using the Services on behalf of a business or other organization, references to “you” may include both you and the organization you represent, as applicable.

1.Information We Collect

Rivelo may collect personal information and business information directly from you, automatically through your use of the Services, from businesses or other users that interact with you through the Services, and from third parties that assist us in providing the Services.

Information you provide directly to Rivelo may include your name, business name, job title, email address, telephone number, mailing address, business address, account credentials, authentication information, business ownership information, authorized representative information, tax identification information, bank account information, payout information, and information submitted in connection with merchant onboarding, account verification, underwriting, risk review, compliance review, customer support, or other operational processes.

The Services may also process information relating to commercial transactions and business relationships, including invoice numbers, invoice amounts, customer and vendor information, line-item descriptions, quantities, unit prices, tax information, payment terms, purchase information, transaction status, payment method, payment history, payout information, and other data contained in invoices or other business records submitted to or processed through the Services.

Depending on the products and services requested, Rivelo or its service providers and financial partners may collect information necessary to verify the identity of individuals or businesses, confirm bank-account information, assess eligibility, prevent fraud, manage risk, or satisfy legal and regulatory requirements. Certain sensitive information may be collected directly by third-party providers or financial institutions and may not be stored directly by Rivelo.

When you access or use the Services, Rivelo and its service providers may also automatically collect technical and usage information, including your Internet Protocol address, browser type, device type, operating system, device identifiers, approximate location derived from your IP address, referring and exit pages, pages or features accessed, dates and times of access, session information, log data, diagnostic information, security information, and information collected through cookies, pixels, local storage, or similar technologies.

Rivelo may also receive information from third parties, including payment processors, banks, financial institutions, identity-verification providers, fraud-prevention providers, underwriting providers, financing providers, credit or commercial information providers where permitted by law, business-verification providers, service providers, integration partners, merchants, customers, buyers, vendors, suppliers, and publicly or commercially available sources.

2.How We Use Information

Rivelo may use personal information and business information to provide, operate, maintain, administer, support, and improve the Services. This includes creating and maintaining accounts, authenticating users, processing and managing invoices and transaction information, facilitating payments and payouts, connecting merchants and customers with payment or financial-service providers, performing identity and business verification, supporting underwriting and eligibility reviews, managing fraud and transaction risk, reconciling transaction information, providing customer service, and communicating with users concerning accounts, transactions, service updates, security matters, and other administrative matters.

Rivelo may use automated document processing, optical character recognition (“OCR”), artificial intelligence, machine-learning tools, and related technologies to extract, structure, classify, validate, reconcile, and process information contained in invoices and other business documents submitted through the Services.

Rivelo may also use information to monitor and improve the performance, functionality, security, reliability, and usability of the Services, to diagnose technical problems, develop new products or features, perform analytics, conduct internal research, improve automated or manual workflows, generate aggregated or de-identified information, and better understand how users interact with the Services.

We may use information to prevent, detect, investigate, and address fraud, unauthorized transactions, misuse, security incidents, suspicious activity, violations of our agreements, and other harmful or unlawful conduct. We may also use information to comply with applicable laws, regulations, legal processes, contractual obligations, financial-services requirements, tax obligations, recordkeeping requirements, and requests from governmental, regulatory, judicial, or law-enforcement authorities.

Where permitted by law, Rivelo may use contact information to send marketing or promotional communications regarding Rivelo products and services. You may opt out of promotional email communications by using the unsubscribe mechanism provided in those communications. Even if you opt out of marketing communications, Rivelo may continue to send transactional, administrative, account-related, legal, security, or service communications.

Rivelo may also use information for additional purposes disclosed to you at the time information is collected or otherwise with your consent.

3.Payment, Banking, Underwriting, and Financial-Service Information

Rivelo provides technology and related services that facilitate business payment and financial-service workflows. Certain payment, banking, settlement, card-processing, financing, underwriting, eligibility, or related services available through Rivelo may be provided by third-party banks, payment processors, financial institutions, lenders, financing providers, networks, or other financial-service partners.

Rivelo may transmit information to third-party payment and financial-service providers, including providers such as Balance, as reasonably necessary for merchant onboarding, identity and business verification, underwriting, eligibility determinations, transaction processing, payment settlement, fraud prevention, risk management, compliance, and the delivery of related financial services. Such providers may process information independently under their own privacy policies, contractual obligations, and applicable legal requirements.

When you request or use such services, Rivelo may transmit information to those third parties as reasonably necessary to process or settle a transaction, verify identity or account ownership, perform underwriting, assess eligibility, manage risk, prevent fraud, comply with applicable law, or provide the requested service. Those third parties may process personal information independently under their own privacy policies, contractual obligations, and legal requirements.

Rivelo is a technology platform and is not necessarily the bank, lender, card network, financial institution, or payment processor responsible for a particular financial product or transaction merely because such product or service is made accessible through the Rivelo platform.

4.How We Disclose Information

Rivelo may disclose personal information and business information to service providers and other third parties where reasonably necessary to operate the Services, complete transactions, maintain security, comply with law, or otherwise carry out the purposes described in this Privacy Policy.

These recipients may include cloud-hosting providers, software vendors, customer-support providers, analytics providers, communications providers, electronic-signature providers, document-processing providers, data-extraction providers, identity-verification providers, fraud and risk providers, cybersecurity providers, professional advisers, payment processors, banks, financial institutions, card networks, financing providers, lenders, underwriting providers, banking-data providers, and other parties involved in processing, settling, funding, securing, or facilitating a transaction.

Where necessary to administer a commercial transaction, Rivelo may also disclose relevant information among merchants, customers, buyers, vendors, suppliers, or other parties participating in or affected by that transaction.

Rivelo may disclose information if we reasonably believe disclosure is necessary to comply with applicable law, regulation, subpoena, court order, governmental request, regulatory request, or other legal process; to investigate or prevent fraud, illegal activity, or security threats; to protect the rights, property, safety, or security of Rivelo, our users, or others; to enforce agreements; or to establish, exercise, or defend legal claims.

Rivelo may also transfer information in connection with an actual or contemplated merger, acquisition, financing, restructuring, reorganization, bankruptcy, sale of assets, or other corporate transaction, subject to applicable law and appropriate confidentiality protections.

5.Sale, Sharing, and Targeted Advertising

Rivelo does not sell personal information for monetary consideration.

Certain state privacy laws define the terms “sale,” “sharing,” or “targeted advertising” broadly enough to include certain disclosures of personal information for cross-context behavioral advertising, advertising measurement, or similar purposes. If Rivelo engages in activities that constitute a sale, sharing, or targeted advertising under applicable law, Rivelo will provide any notices and opt-out mechanisms required by such law.

Disclosures of information to service providers, payment partners, financial institutions, and other parties for purposes of operating the Services, processing transactions, preventing fraud, providing requested services, or otherwise carrying out the functions described in this Privacy Policy are not necessarily considered sales of personal information under applicable law.

6.Cookies and Similar Technologies

Rivelo and its service providers may use cookies, pixels, local storage, software development kits, and similar technologies to operate and secure the Services, authenticate users, maintain sessions, remember preferences, understand website and platform usage, measure performance, improve functionality, detect fraud or misuse, diagnose technical issues, and support analytics.

Where required by applicable law, Rivelo will provide users with choices concerning non-essential cookies or similar technologies. You may also be able to restrict or disable cookies through your browser settings. Disabling certain cookies may affect the functionality, security, or availability of portions of the Services.

7.Data Security

Rivelo uses administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, acquisition, disclosure, alteration, destruction, loss, or misuse. These safeguards may include access controls, authentication procedures, encryption, secure hosting environments, monitoring, logging, security testing, and internal procedures designed to limit access to information based on business need.

Although Rivelo takes reasonable measures designed to protect information, no Internet transmission, storage system, or security measure can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and authentication methods and for notifying Rivelo promptly if you believe your account, credentials, or information have been compromised.

8.Data Retention

Rivelo retains personal information and business information for as long as reasonably necessary to provide and administer the Services, maintain business and transaction records, comply with contractual obligations, fulfill legal and regulatory requirements, support audit and tax obligations, detect and prevent fraud, resolve disputes, enforce agreements, maintain security, and establish or defend legal claims.

Retention periods may vary depending on the nature of the information, the Services involved, applicable contractual requirements, legal or regulatory obligations, and the relationship between Rivelo and the relevant business or individual. Certain information may be retained after an account has been closed or a business relationship has ended if retention is reasonably necessary for compliance, security, fraud prevention, dispute resolution, backup integrity, or other legitimate business purposes.

Residual copies of information may remain in backup, disaster-recovery, archival, logging, or other systems for a reasonable period after information has been removed from active systems.

9.Aggregated and De-Identified Information

Rivelo may create aggregated, statistical, anonymized, or de-identified information from data collected through the Services. To the extent permitted by applicable law, Rivelo may use and disclose such information for analytics, research, benchmarking, product development, service improvement, security, operational planning, and other lawful business purposes.

Where required by law, Rivelo will maintain information in de-identified form and will not attempt to re-identify such information except as permitted by applicable law.

10.Privacy Rights

Depending on the jurisdiction in which you reside and subject to applicable law, you may have certain rights with respect to your personal information. Those rights may include the right to request access to personal information maintained about you, request correction of inaccurate information, request deletion of certain information, request a portable copy of certain information, obtain information about categories of personal information collected or disclosed, opt out of certain sales, sharing, targeted advertising, or profiling, withdraw consent where processing is based on consent, or appeal certain decisions regarding privacy requests.

These rights are not absolute and may be subject to exceptions or limitations under applicable law. Rivelo may retain or decline to delete information where retention is permitted or required for legal, regulatory, tax, fraud-prevention, security, transaction-processing, contractual, dispute-resolution, or other lawful purposes.

Rivelo will not unlawfully discriminate against you for exercising privacy rights available under applicable law.

To submit a privacy request, you may contact Rivelo at support@gorivelo.com. Rivelo may require information sufficient to verify your identity and authority to make the request before acting on it. Where permitted by applicable law, an authorized agent may submit a request on your behalf, subject to verification of the agent’s authority and any other applicable requirements.

11.California Privacy Rights

California residents may have additional rights under the California Consumer Privacy Act, as amended from time to time, and other applicable California privacy laws. Subject to applicable exceptions and limitations, those rights may include the right to know what personal information Rivelo collects, uses, and discloses; the right to access certain personal information; the right to request correction of inaccurate personal information; the right to request deletion of certain personal information; and, where applicable, the right to opt out of the sale or sharing of personal information.

California residents may also have certain rights relating to sensitive personal information where Rivelo uses or discloses such information in a manner that gives rise to those rights under applicable law.

Rivelo does not discriminate against California residents for exercising applicable privacy rights. Requests may be submitted using the contact information provided in this Privacy Policy.

12.Business and Commercial Information

The Rivelo platform is primarily designed for business and commercial use. When you interact with Rivelo on behalf of a company, merchant, customer, buyer, vendor, supplier, or other organization, Rivelo may process professional and business-contact information relating to you in that capacity.

In certain circumstances, Rivelo customers or other businesses may determine the purposes and means of processing information submitted through the Services, while Rivelo processes such information on their behalf. If your personal information has been submitted to Rivelo by another organization and you have a question regarding the organization’s use of that information, you may need to direct your request to the organization that provided the information to Rivelo.

13.Children’s Privacy

The Services are intended for business use and are not directed to children under the age of thirteen. Rivelo does not knowingly collect personal information directly from children under thirteen through the Services.

If Rivelo learns that it has collected personal information directly from a child under thirteen in circumstances where such collection was not legally permitted, Rivelo will take reasonable steps to delete or otherwise appropriately address that information.

14.Third-Party Websites and Services

The Services may contain links to, integrations with, or access to third-party websites, platforms, financial products, software, or services. Those third parties may collect or process information independently from Rivelo and may maintain their own privacy policies, terms, security practices, and legal obligations.

Rivelo is not responsible for the privacy, security, or information-handling practices of third parties that operate independently from Rivelo. You should review the applicable privacy notices of such third parties before providing them with personal information.

15.Electronic Communications

Rivelo may send electronic communications relating to your account, transactions, security, legal notices, service updates, payment activity, onboarding, customer support, or other administrative matters. These communications may be necessary to provide the Services and may not be subject to marketing opt-out preferences.

Where permitted by law, Rivelo may also send marketing or promotional communications. You may opt out of promotional emails by following the unsubscribe instructions contained in those communications. Your decision to opt out of marketing communications will not prevent Rivelo from sending non-promotional communications that are necessary to administer your relationship with Rivelo or provide the Services.

16.Changes to This Privacy Policy

Rivelo may amend or update this Privacy Policy from time to time to reflect changes in the Services, business practices, technology, legal requirements, regulatory requirements, or other circumstances. When Rivelo updates this Privacy Policy, the revised version will be posted on the applicable Rivelo website and the “Last Updated” date will be revised accordingly.

Where required by applicable law, Rivelo may provide additional notice of material changes. Your continued use of the Services following the effective date of an updated Privacy Policy will be subject to the revised Privacy Policy to the extent permitted by law.

17.Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or Rivelo’s privacy practices, you may contact: