Privacy Policy

1. Data controller

RivoCalc — an independent project available at www.rivocalc.com. Contact us through the contact form.

2. What data we collect

We process the following personal data, all kept to the strict minimum necessary:

• Contact form: the name, email, and message you choose to send us. We don't collect your address, phone number, or any other personal data.
• IP address: collected temporarily, only for spam protection (rate limiting). We don't associate the IP with your form submission in long-term storage.
• Usage data (analytics): collected only if you accept cookies — pages viewed, time on page, country of origin. Always anonymized (IP anonymization enabled).

3. Legal basis for processing

• Contact form: legitimate interest (replying to you) and pre-contractual steps (handling your request).
• Analytics: explicit consent (collected through the cookie banner — you can change your decision at any time by clearing your browser storage).
• IP-based rate limiting: legitimate interest (service security).

4. Sub-processors

Your data may be processed by the following providers (all under Standard Contractual Clauses for transfers outside the EEA, where applicable):

• Resend, Inc. (United States) — sends email from the contact form.
• Cloudflare, Inc. (United States) — temporary message storage (KV), rate limiting, DNS, and CDN.
• Vercel Inc. (United States) — hosts the web application and processes requests.
• Google LLC (United States) — Google Analytics 4, only if you accepted cookies.

5. Retention period

• Contact emails: kept for up to 90 days after your last interaction with us, then deleted.
• Temporary message queue (KV): automatically deleted after 30 days.
• IP address (rate limiting): automatically deleted after 60 seconds.
• Analytics data: retention is controlled directly through our Google Analytics account, set to the shortest available window (14 months).

6. Cookies

We only use the following cookie categories:

• Essential (always active): no third-party cookies; a single record in localStorage stores your decision about analytics cookies.
• Analytics (optional, requires consent): Google Analytics 4 — only loads if you accept it in the banner. You can decline it and the site still works fine.

To change your decision at any time, use "Manage cookies" in the site footer — the record rivocalc-cookie-consent-v1 in your browser's localStorage is cleared and the cookie banner reappears so you can decide again.

7. Your rights

Under GDPR, you have the right to:

• Access — know what data of yours we process.
• Rectification — correct inaccurate data.
• Erasure — request deletion of your data (the "right to be forgotten").
• Portability — receive a copy of your data in a structured format.
• Objection — object to processing based on legitimate interest.
• Withdraw consent — decline analytics cookies at any time.

To exercise these rights, contact us through the contact form. We respond within 30 days, as required by GDPR.

8. Filing a complaint with the CNPD

If you believe our handling of your data violates GDPR, you have the right to file a complaint with Portugal's data protection authority: Comissão Nacional de Proteção de Dados (CNPD).