This Privacy Policy explains how ZYNTHECK, a company registered in the Netherlands, processes personal data in connection with the RIVET website and product. We are committed to the General Data Protection Regulation (GDPR) as it applies in the Netherlands. RIVET is self-hosted: your security data stays on your own server and is never sent to us.
The data controller for personal data described in this policy is ZYNTHECK, a company registered in the Netherlands ("we", "us"). You can reach us at lukas@rivet-security.com for any privacy matter, including to exercise your rights.
>We deliberately collect as little as possible. The data we process falls into three groups:
We rely on the following legal bases under Article 6 GDPR:
We use the limited data we receive to fulfil your order, deliver and activate your licence key, provide customer support, send essential service messages, and comply with our legal and accounting obligations. We do not sell your data, and we do not use it for advertising or automated decision-making.
>We keep invoice and transaction records for 7 years, as required by Dutch tax law. Other personal data (such as support correspondence) is kept only as long as needed for the purpose collected and is deleted on request once we are no longer legally required to retain it.
>We share data only where necessary to run the business:
Where a processor such as Lemon Squeezy transfers data outside the European Economic Area, that transfer is protected by appropriate safeguards under the GDPR, such as the EU Standard Contractual Clauses.
>Under the GDPR you have the right to:
The marketing website uses no cookies. The self-hosted dashboard uses one strictly-necessary session cookie to keep you logged in; if you tick "Trust this device" it lasts up to 30 days, otherwise it expires when you close your browser. No consent banner is required because we set no tracking or analytics cookies.
>RIVET is a professional tool intended for server administrators. It is not directed at children, and we do not knowingly collect data from anyone under 16 years of age.
>We may update this policy as the product or the law evolves. The current version is always published at rivet-security.com. Material changes will be announced on the website and, where we hold your email, by email.
>To exercise any right, email lukas@rivet-security.com and we will respond within one month as required by the GDPR. If you believe we have not handled your data properly, you may contact the Autoriteit Persoonsgegevens.
>ZYNTHECK · Netherlands · lukas@rivet-security.com. You have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).