Privacy Policy

1. Data controller

RivoCalc — an independent project available at www.rivocalc.com. Contact us via the contact form.

2. What data we collect

We process the following personal data, kept to the strict minimum necessary:

• Contact form: the name, email and message you choose to send us. We don't collect your address, phone number or any other personal data.
• IP address: collected temporarily, purely to protect against spam (rate limiting). We don't store the IP address alongside your form submission long-term.
• Usage data (analytics): only collected if you accept cookies — pages visited, time on page, country of origin. Always anonymised (IP anonymisation is switched on).

3. Legal basis for processing

• Contact form: legitimate interest (replying to you) and taking steps at your request before entering into a contract.
• Analytics: explicit consent (collected via the cookie banner — you can change your decision at any time by clearing your browser storage).
• IP-based rate limiting: legitimate interest (keeping the service secure).

4. Sub-processors

Your data may be processed by the following providers (all covered by appropriate safeguards for transfers outside the UK, such as the UK's International Data Transfer Addendum):

• Resend, Inc. (United States) — sends emails from the contact form.
• Cloudflare, Inc. (United States) — temporary message storage (KV), rate limiting, DNS and CDN.
• Vercel Inc. (United States) — hosts the web application and processes requests.
• Google LLC (United States) — Google Analytics 4, only if you've accepted cookies.

5. Retention period

• Contact emails: kept for up to 90 days after your last interaction with us, then deleted.
• Messages in temporary storage (KV): automatically deleted after 30 days.
• IP address (rate limiting): automatically deleted after 60 seconds.
• Analytics data: retention is controlled directly through your Google account settings, and set to the minimum period available in GA4 (14 months).

6. Cookies

We only use the following categories of cookies:

• Essential (always on): no third-party cookies; a single record stored in localStorage recording your decision on analytics cookies.
• Analytics (optional, requires consent): Google Analytics 4 — only loads if you accept it in the banner. You can decline and the site will still work exactly the same.

To change your decision at any time, use the "Manage cookies" option in the site footer — the record in rivocalc-cookie-consent-v1 your browser's localStorage is reset, and the cookie banner will reappear so you can decide again.

7. Your rights

Under UK GDPR, you have the right to:

• Access — find out what data we hold about you.
• Rectification — have incorrect data corrected.
• Erasure — ask us to delete your data (the "right to be forgotten").
• Portability — receive a copy of your data in a structured format.
• Objection — object to processing based on legitimate interest.
• Withdraw consent — decline analytics cookies at any time.

To exercise these rights, get in touch via the contact form. We respond within 30 days, as required under UK GDPR.

8. Complaints to the ICO

If you believe our handling of your data breaches UK GDPR, you have the right to complain to the UK's data protection regulator: Information Commissioner's Office (ICO).