Privacy Policy

Rivo Financial Intelligence ("Rivo," "we," "us," or "our") is an AI-powered personal finance companion built to help you understand and improve your financial life. To do that well, we work with sensitive information — your spending, your accounts, your financial habits — and we treat that responsibility with the seriousness it deserves.

This Privacy Policy explains, in plain terms, what we collect, why we collect it, how we protect it, and the choices you have. It applies to the Rivo mobile app, our website, and every connected feature (together, the "Platform" or "Service"). Read it alongside our Terms & Conditions, which it forms a part of.

We are a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (the "DPDP Act"), and we operate in line with the Information Technology Act, 2000, and applicable Reserve Bank of India guidelines. We ask for a separate choice before accessing optional data sources, requesting your Experian credit report, or sending information to OpenAI for Companion (the in-app chat). The first time you open Companion, we ask before anything is sent. Companion cannot be used until you allow it. If you do not allow it, nothing is sent to OpenAI, and the rest of Rivo stays available.

This policy applies to the information we handle while delivering Rivo's services, which include spending analysis and categorization, savings optimization, borrowing guidance, wealth and financial planning tools, calculators, and in-app engagement features such as notifications and nudges.

A note on what's outside this policy: Rivo does not provide insurance products, mutual fund investments, KYC verification, or Aadhar-based authentication. Where any such service appears, it is offered by a regulated third party under its own privacy policy, not ours. This policy also does not extend to external websites you reach through links in our app.

We collect information in three ways: what you give us, what you let us access from your devices and accounts, and what we observe as you use the Service.

3.1 Information You Provide

When you register and build your profile, you share details such as your name, email address, phone number, date of birth, gender, employment information, and address. If you take up services that need it, you may also provide financial documents and identifiers required for verification or lending.

If you use Companion, you also provide what you type in the chat, together with the recent thread needed to answer.

3.2 Bank and Account Data

Through licensed financial data aggregators such as Plaid and Setu, and with your permission, we retrieve your transaction history, balances, account types, and account-holder information. Your banking passwords are never seen or stored by Rivo — the aggregator handles authentication securely.

3.3 SMS Data

If you grant SMS access, Rivo scans your existing SMS inbox when you first connect this feature, and continues to detect new messages the moment they arrive on your device so your transactions stay up to date in real time. This access is used only to identify transaction-related messages — alerts from banks, cards, UPI, wallets, merchants, and billers — so we can track and categorize your spending automatically and keep your financial picture accurate.

What we filter out. Rivo does not collect or upload your personal conversations, one-time-password (OTP) or verification messages, promotional or marketing texts, or any SMS unrelated to your finances. Non-financial messages are filtered out, on your device wherever technically feasible, before anything leaves your phone. We do not use SMS access for OTP reading, login, or account verification.

What we do with it. From the transaction messages that pass this filter, we extract structured details — the merchant, the amount, and the date — to power expense tracking, categorization, reminders, financial insights, and account reconciliation. The filtered transaction data is sent to our servers over encrypted connections and stored with strong encryption at rest.

A core feature, not a requirement. SMS access is what allows Rivo to track your transactions automatically, but it is entirely optional. If you decline or later revoke it, Rivo keeps working — you can add transactions manually instead. Retention and sharing are detailed in Sections 7, 8, and 9 below.

3.4 Gmail Data

If you connect your Gmail account through Google's secure authorization flow, Rivo reads relevant emails — invoices, receipts, billing statements, subscription notices — and extracts the structured details we need (amounts, merchants, dates, sender). That extracted information is stored on our encrypted servers; the full body and attachments of your emails are not retained by Rivo. Because we use Google's authorization protocol, we never receive or store your Google password, and Google keeps its own log of our access.

Google API Services — Limited Use. Rivo's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

In practice, this means that for data obtained through Google APIs:

• We use it only to provide and improve the user-facing features you connected Gmail for — detecting receipts, invoices, subscriptions, and bills so we can track and categorize your spending.
• We do not use it for advertising, ad targeting, or marketing, and we do not sell or lease it.
• We do not use it — raw or derived — to develop, train, or improve generalized artificial intelligence or machine learning models. Any model or logic we apply operates solely to deliver the features described above.
• We do not transfer it to third parties except to OpenAI, when you have allowed Companion, so it can write Companion replies; as otherwise necessary to provide or improve the user-facing features you connected Gmail for; to comply with applicable law; or as part of a merger or acquisition; and only with your consent where required.
• No human at Rivo reads it, except with your explicit consent for a specific issue (for example, a support request you raise), where it is necessary for security purposes such as investigating abuse, where required by law, or where the data has been aggregated and anonymized so it no longer identifies you.

If you allow Companion and Gmail is connected, we send OpenAI extracted statement and transaction details from Gmail: the bank, card, merchant, amount, and date. We do not send the email itself. If Gmail is not connected, that Gmail financial data is not sent. Section 7 describes who receives it and how it is protected.

You can disconnect Gmail at any time in the app under Settings, or revoke Rivo's access directly at myaccount.google.com/permissions.

3.5 Information We Collect Automatically

As you use Rivo, we gather technical and usage data: your device model and operating system, app interactions, time spent, crash reports, performance metrics, and an approximate location inferred from your IP address (city or state level, never precise GPS). We also use cookies and analytics tools to understand how the Service is used and to improve it.

3.6 Contacts for Rivo Circle

If you choose to grant contact permission while using Rivo Circle, the app reads the display names and phone numbers in your device contacts to show you a contact picker. Your contact list is not used for advertising or marketing.

We send only the contact(s) you select — or the mobile number(s) you enter manually — to our service to create and manage Circle invitations. Unselected contacts are not sent to Rivo for this feature. We use selected invite details only to deliver and manage the invitation and the Circle. Other Circle members may see an invitee's display name and invitation or membership status as needed to operate the Circle.

Contact access is optional. You can enter a mobile number manually instead. You can revoke contact permission in your device settings at any time; revoking it stops future access to your device contacts, but does not withdraw details you already chose to submit or cancel an invitation already sent.

3.7 Experian Credit Information

When you choose to check or refresh your credit score, Rivo requests your credit report from Experian Credit Information Company of India Private Limited through our bureau service provider. To identify you and make that request, we may send your name, mobile number, email address, PAN, date of birth, and the consent and device details needed to process the request. We receive the Experian score and report information available for you, which may include credit accounts, balances, limits, repayment history, enquiries, and identifying details in the report.

We use this information to show your credit score and report, explain the factors affecting it, and provide credit-management insights. A stored report may be shown again when you revisit the feature; viewing it does not itself request a new report from Experian. Our Bureau Privacy Policy explains in detail how we handle this information.

If you buy a subscription in the app, the payment provider or app store shown during checkout processes your payment under its own terms. We may receive information needed to manage your subscription and respond to billing questions, such as the plan, price, billing period, payment or renewal status, transaction reference, and purchase, renewal, or cancellation dates. The payment provider handles your payment method details; do not send full card or bank credentials to Rivo.

Some of Rivo's features depend on access or a report request you choose deliberately. Each choice is separate and optional.

None of these are required to use Rivo's core spending features — you can track expenses through manual entry without granting any of them. You can also enter a mobile number manually instead of granting contact permission for Rivo Circle. Companion is separate from those device permissions. Until you allow it, Companion stays unavailable and nothing is sent to OpenAI, and the rest of Rivo remains usable. Turning off SMS, Gmail, bank, or contacts access stops future collection from that source; information already gathered follows the retention schedule in Section 9.

We put your information to work for purposes that are tied directly to serving you:

• Delivering, maintaining, and improving the Service;
• Analyzing your spending and producing personalized insights and recommendations;
• Assessing your eligibility and suitability for borrowing, based on your financial profile;
• Processing SMS and Gmail data to categorize expenses accurately;
• Writing Companion replies, after you allow Companion, by sending what you type, the recent thread needed to answer, and — when Gmail is connected — extracted statement and transaction details to OpenAI;
• Creating and managing Circle invitations when you select contacts or enter mobile numbers manually;
• Managing subscriptions, confirming payment status, preventing payment fraud, and investigating billing questions or disputes;
• Sending you notifications, in-app messages, and helpful nudges;
• Detecting and preventing fraud and unauthorized access;
• Meeting our legal and regulatory obligations;
• Conducting research and analysis to make Rivo better.

We believe consent should be understood, not buried. Here is exactly what you are agreeing to.

The data we process: your registration details, bank transaction data, SMS messages, Gmail-extracted data, what you type in Companion and the recent thread needed to answer, selected Rivo Circle invitee display names and mobile numbers, Experian credit information when you request it, subscription and payment-status information, and device and usage information.

The lawful basis for each use:

• Service delivery — analyzing SMS, Gmail, and bank data so we can categorize your spending and give you insights;
• Companion replies — sending what you type, the recent thread needed to answer, and, when Gmail is connected, extracted statement and transaction details to OpenAI, only after you allow Companion and only so OpenAI can write the reply;
• Credit-report request — obtaining your Experian report when you choose to check or refresh your score, then displaying it and explaining your credit health;
• Circle invitations — delivering and managing invitations and Circle membership using the contact details you choose to submit;
• Subscriptions and payments — administering a plan you purchase, confirming payment or renewal status, and handling billing support or disputes;
• Fraud prevention — examining transaction patterns to keep your account safe, a legitimate use under the DPDP Act;
• Legitimate business interest — improving the Service through analysis and research;
• Legal compliance — retaining certain records to meet RBI and anti-money-laundering requirements.

The nature of your consent: it is free (refusing does not lock you out of core features), specific (SMS, Gmail, bank access, contacts access, Companion, and a credit-report request are separate choices), informed (this policy spells out what each involves), unconditional (we don't bundle it with unrelated services), and unambiguous (it requires a clear opt-in for the relevant feature).

Companion: the first time you open Companion, we ask permission before anything is sent. Companion cannot be used until you allow it. If you do not allow it, nothing goes to OpenAI and the rest of Rivo remains usable. When Gmail is connected, the Gmail information in that send is extracted statement and transaction detail only — the bank, card, merchant, amount, and date — and not the email itself. When Gmail is not connected, that financial data is not included.

Experian reports: a general acceptance of this policy does not itself start a bureau pull. A new report request follows your action to check or refresh your score; Rivo records the request and consent details associated with that pull. A request to view a report already held by Rivo does not cause another bureau pull.

Withdrawing consent: you can change your mind at any time by adjusting available permissions in the app, or by emailing cp@rivo.pe with the subject line "Withdraw Consent — [Your Email]". You may also use that address to withdraw authorization for future Experian requests and ask us to delete bureau information we hold, subject to applicable retention duties. Withdrawal does not undo processing that was lawful before you withdrew, and features that depend on the affected data may stop working.

We share your information only when there's a clear reason to, and we are deliberately restrained about it.

7.1 Service Providers

We rely on trusted partners for things like cloud hosting, data aggregation, payment processing, analytics, and customer support. They receive only what they need to perform their function, and they are bound by confidentiality and data-protection obligations.

Companion replies are written by OpenAI. Nothing is sent until you allow Companion, which we ask the first time you open it. We then send what you type and the recent thread needed to answer. If Gmail is connected, we also send extracted statement and transaction details — the bank, card, merchant, amount, and date — and not the email itself. If Gmail is not connected, those details are left out. OpenAI uses what it receives only to write the reply, and it protects that information to a standard equal to the protections in this policy. We do not send it for advertising, and we do not sell it. If you do not allow Companion, it stays unavailable and the rest of the app remains usable.

For an in-app subscription, the payment provider or app store shown at checkout processes the payment. We may exchange the subscription and transaction details needed to confirm access, administer renewals or cancellations, prevent fraud, and investigate a billing issue. The provider's own terms and privacy notice also apply to payment processing.

To ask about or dispute a subscription charge, email cp@rivo.pe or contact us through Customer Support in the Rivo app.

For a credit-report request, the bureau service provider conveys the information needed to identify you and obtain your report from Experian, then returns the report to Rivo. This is separate from sharing information with Lending Partners.

7.2 Rivo Circle

When you choose a contact or enter a mobile number to invite someone to a Circle, we process the selected display name and mobile number to deliver and manage the invitation. We do not use your contact list for advertising or marketing, and we do not sell it. We may make an invitee's display name and invitation or membership status available to other members of that Circle as needed for the feature. We do not share your full contact list with them.

7.3 Lending Partners (Only If You Opt In)

If you choose to use borrowing guidance, we share limited information with Lending Partners to help match you with suitable credit. What we share is your extracted transaction data (merchant, amount, date — not raw SMS or email), relevant credit and eligibility details, and income or employment information you've provided. Our partners include institutions such as mPokket, InCred Financial Services, Branch International, and Fibe, among others; the current list lives in the app under Settings. Each partner handles your data under its own privacy policy once it reaches them. Opt out of borrowing guidance and all partner sharing stops.

7.4 Legal and Safety Reasons

We may disclose information where the law requires it — to comply with a court order, respond to a lawful government request, or protect the rights, property, and safety of our users and ourselves.

7.5 Business Transfers

If Rivo is involved in a merger, acquisition, or sale of assets, your information may transfer to the successor entity, which would remain bound by commitments at least as protective as those in this policy.

Some commitments are easier to understand as clear "nos":

• We do not sell your personal data to data brokers.
• We do not lease your SMS or Gmail data to advertisers.
• We do not share raw SMS content or full email contents with any third party. Gmail data sent to OpenAI for Companion is limited to extracted statement and transaction details — bank, card, merchant, amount, and date — and only as described in Section 7.
• We do not send your information to OpenAI unless you allow Companion. We do not send it for advertising, and we do not sell it.
• We do not read SMS for OTPs, login, or account verification, and we do not collect personal conversations, promotional texts, or any non-financial messages.
• We do not use your SMS data or financial data for advertising, behavioral ad targeting, or marketing lead generation.
• We do not use your contact list or selected Circle invitee details for advertising, behavioral ad targeting, or marketing lead generation.
• We do not use data received from Google APIs — raw or derived — to develop, train, or improve generalized AI or ML models.
• We do not require you to hand over SMS or Gmail access to use Rivo's basic spending features.

We hold onto your data only as long as we genuinely need it to serve you or to meet a legal duty. Here's the schedule at a glance:

All of this data is stored on servers located in India. When you ask us to delete your data, including a stored bureau report, we act on it within the limits of any legal hold that requires us to retain specific records.

Protecting your data is a continuous discipline, not a checkbox. Our safeguards follow the security obligations of the DPDP Act and the IT Act, 2000, and span three layers:

Technical — AES-256 encryption for sensitive data (including SMS and Gmail data) at rest, TLS 1.2 or higher for data in transit, OAuth 2.0 and tokenized authentication so passwords are never stored in plaintext, and isolated backend systems with role-based access.

Administrative — collecting only what we need, limiting live-data access to staff who require it (with that access logged), running regular penetration tests and security reviews, and maintaining an incident-response plan that includes timely breach notification consistent with our regulatory duties.

Physical — data centers within India, protected by access controls and multi-factor authentication for administrative entry.

No system is perfectly impenetrable, and we can't promise absolute security. We do promise to keep raising the bar — and we ask you to do your part by using a strong password and keeping your login details confidential.

Under the DPDP Act and other applicable laws, you hold meaningful rights over your information. You can exercise any of these by writing to cp@rivo.pe or, where available, directly in the app under Settings.

• Access — request a copy of the personal information we hold about you.
• Correction — fix inaccurate or incomplete details, many of which you can edit yourself in your profile.
• Erasure — ask us to delete your personal data; we'll comply within 30 days unless a law requires us to keep it.
• Withdraw consent — turn off SMS, Gmail, bank, or contacts access through your device or the app, or email us to withdraw authorization for future Experian requests.
• Restrict processing — ask us to limit how we use your information in certain situations.
• Data portability — request your personal data in a portable format so you can take it elsewhere.
• Nominate — appoint someone to exercise your rights on your behalf in the event of death or incapacity, as the DPDP Act allows.

We also give you visibility into your own permissions: in the app, you can toggle each data source, re-authorize Gmail, and review which sources Rivo is currently drawing from.

Deleting your account. You can request full account deletion at any time directly in the app, under Settings, or by writing to cp@rivo.pe with "Delete Account" in the subject line. Deleting your account stops all further data collection and removes your personal data, including any stored SMS-derived and Gmail-derived data, except where a specific record must be retained to meet a legal obligation (see Section 9).

Rivo is intended for adults. You must be at least 18 — the age at which credit-related services become available in India — to use the Service, and we do not knowingly collect information from anyone younger. If we learn that a minor has provided us with personal data, we will delete it promptly. If you believe this has happened, please contact cp@rivo.pe right away.

On our website and within the app, we use cookies, session identifiers, and similar technologies to keep you logged in, remember your preferences, understand usage, and improve the experience. Most browsers accept cookies by default; you can adjust your browser settings to limit or reject them, though some features may not work as smoothly if you do.

As Rivo evolves and the regulatory landscape shifts, we may update this Privacy Policy. When a change is material, we'll tell you by email or through a clear notice in the app, and we'll refresh the "Last Updated" date above. Continuing to use Rivo after a change takes effect means you accept the updated policy, so it's worth checking back from time to time.

Questions, concerns, or requests about your privacy go to a real person, and we aim to respond promptly.

If you've raised a data-protection grievance with us and it remains unresolved after our internal process, you may escalate it to the Data Protection Board of India once that body is operational. Any dispute relating to this policy falls under the exclusive jurisdiction of the courts of Bengaluru, Karnataka.

Rivo complies with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and applicable RBI fintech guidelines. Your trust is the foundation of everything we build.