Privacy Policy

1. Data controller

Rapid Dreams GmbH, c/o Value Solutions, Riedstrasse 7, 6330 Cham, Switzerland — the controller responsible for RivoCalc, available at www.rivocalc.com. Contact: privacy@rivocalc.com or via the contact form.

2. What data we collect

We process the following personal data, kept to the strict minimum necessary:

• Contact form: the name, email and message you choose to send us. We don't collect your address, phone number or any other personal data.
• IP address: collected temporarily, purely to protect against spam (rate limiting). We don't store the IP address alongside your form submission long-term.
• Usage data (analytics): only collected if you accept cookies — pages visited, time on page, country of origin. Always anonymised (IP anonymisation is switched on).
• Waiting list (quote tool): your email, country and the calculator you signed up from, your optional answer on whether you work in construction, and the date and wording of the consent you gave. We don't store your IP address or browser data.

3. Legal basis for processing

• Contact form: legitimate interest (replying to you) and taking steps at your request before entering into a contract.
• Analytics: explicit consent (collected via the cookie banner — you can change your decision at any time by clearing your browser storage).
• IP-based rate limiting: legitimate interest (keeping the service secure).
• Waiting list: explicit consent, given by ticking the box on the form. You can withdraw it at any time.

4. Sub-processors

Your data may be processed by the following providers, based in the United States. Transfers to the United States rely on the UK Extension to the EU-US Data Privacy Framework (and its EU and Swiss equivalents) where the provider is certified, and otherwise on Standard Contractual Clauses with the UK International Data Transfer Addendum:

• Resend, Inc. (United States) — sends emails from the contact form.
• Cloudflare, Inc. (United States) — contact message storage (KV), rate limiting, DNS and CDN.
• Vercel Inc. (United States) — hosts the web application and processes requests.
• Google LLC (United States) — Google Analytics 4, only if you've accepted cookies.
• Convex, Inc. (United States; data hosted in Ireland, EU) — waiting list database.

5. Retention period

• Contact emails: kept until you ask for removal.
• Contact form messages (KV): kept until you ask for removal.
• IP address (rate limiting): automatically deleted after 60 seconds.
• Analytics data: retention is controlled directly through your Google account settings, and set to the minimum period available in GA4 (14 months).
• Waiting list: kept for as long as we use it to let you know about the tool, or until you ask to be removed or unsubscribe. If the project is dropped, the list is deleted.

6. Cookies

We only use the following categories of cookies:

• Essential (always on): no third-party cookies; a single record stored in localStorage recording your decision on analytics cookies.
• Analytics (optional, requires consent): Google Analytics 4 — only loads if you accept it in the banner. You can decline and the site will still work exactly the same.

To change your decision at any time, use the "Manage cookies" option in the site footer — the record in rivocalc-cookie-consent-v1 your browser's localStorage is reset, and the cookie banner will reappear so you can decide again.

7. Your rights

Under UK GDPR, you have the right to:

• Access — find out what data we hold about you.
• Rectification — have incorrect data corrected.
• Erasure — ask us to delete your data (the "right to be forgotten").
• Portability — receive a copy of your data in a structured format.
• Objection — object to processing based on legitimate interest.
• Withdraw consent — decline analytics cookies or leave the waiting list at any time.

To exercise these rights, get in touch via the contact form, or email privacy@rivocalc.com. We respond within one month, as required under UK GDPR.

8. Complaints to a supervisory authority

If you believe our handling of your data breaks the law, you have the right to complain to the data protection authority in your country of residence in the EU or, in Switzerland, to the Federal Data Protection and Information Commissioner (FDPIC). In the UK, the regulator is the Information Commissioner's Office (ICO).