1. Introduction

Rivly, Inc. ("Rivly," "we," "our," or "us") operates the Rivly marketplace, including rivly.com and related pages, subdomains, applications, seller services, support services, rewards programs, and other online services that link to this Privacy Policy (collectively, the "Services").

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit or use the Services, create an account, buy or sell products, participate in reviews or rewards programs, communicate with us, or otherwise interact with Rivly.

This Privacy Policy should be read together with our Terms of Service and any additional notices presented at the time personal information is collected.

​

2. Personal Information We Collect

The personal information we collect depends on how you interact with Rivly. We may collect the following categories of information:

Identifiers and contact information: Name, email address, phone number, mailing address, billing/shipping address, account username, device identifiers, IP address, and similar identifiers.

Account and profile information: Login credentials, account settings, saved preferences, seller profile information, buyer profile information, and communications preferences.

Commercial information: Products viewed, searched for, purchased, returned, reviewed, or added to cart; transaction history; seller activity; marketplace interactions; rewards activity; and customer service history.

Payment, payout, and verification information: Payment and payout information processed by payment providers, KYC/KYB information, fraud-prevention information, tax-related information, and information needed to verify identity, business status, eligibility, or compliance obligations.

Review, rewards, and user-generated content: Product reviews, ratings, photos, videos, comments, seller content, public profile information, and information used to determine eligibility for rewards or review programs.

Internet or other electronic network activity: Pages viewed, referring URLs, browser type, device type, operating system, timestamps, clickstream data, search terms, session information, diagnostic data, cookies, pixels, and similar technologies.

Approximate location information: Approximate location derived from IP address, shipping/billing address, or information you choose to provide.

Communications: Emails, support tickets, chatbot and live chat messages, recorded chat transcripts, help-center communications, survey responses, and other messages you send to us, including related metadata such as timestamps and routing information.

Inferences: Preferences and interests inferred from your interactions with the Services, such as product interests, seller interests, and marketplace activity.

Sensitive personal information, where applicable: Account login credentials, financial account information processed by providers, government identification or tax information where required for payments, fraud prevention, identity verification, KYC/KYB, or legal compliance. We do not use sensitive personal information to infer characteristics about you.

​

3. Sources of Personal Information

We collect personal information from the following sources:

• You, when you create an account, place an order, sell through Rivly, leave reviews, participate in rewards programs, submit forms, contact support, or otherwise provide information.

• Your device and browser, through cookies, pixels, log files, analytics tools, diagnostic tools, and similar technologies.

• Service providers and partners, including payment processors, identity verification providers, fraud-prevention providers, shipping/logistics providers, support providers, chatbot and customer-support platform providers, analytics providers, advertising platforms, and seller tools.

• Sellers, buyers, and marketplace participants, when necessary to operate the marketplace and resolve transactions or disputes.

• Publicly available sources or business records, where relevant to seller verification, fraud prevention, compliance, or marketplace integrity.

​

4. How We Use Personal Information

We use personal information for the following business and commercial purposes:

• To provide, operate, maintain, secure, and improve the Services.

• To create and manage buyer, seller, and support accounts.

• To process orders, payments, payouts, refunds, returns, rewards, and customer support requests.

• To verify identity, seller eligibility, payment eligibility, review/rewards eligibility, and compliance with marketplace rules.

• To prevent fraud, abuse, unauthorized access, chargebacks, policy violations, and security incidents.

• To communicate with you about orders, accounts, support, policy updates, seller opportunities, rewards, marketing, and promotional offers.

• To personalize the Services, recommend products, measure performance, and understand how users interact with Rivly.

• To run analytics, error monitoring, diagnostics, performance monitoring, limited session replay, customer-support chat, chatbot functionality, and related tools for debugging, support quality, and site reliability.

• To advertise Rivly products, seller services, and marketplace features on or off the Services, including through Meta/Facebook and Google advertising tools where enabled.

• To comply with laws, regulations, subpoenas, tax obligations, payment obligations, KYC/KYB requirements, sanctions screening, and lawful requests.

• To enforce our Terms, seller policies, review policies, rewards rules, and other agreements.

• For any other purpose disclosed to you at the time of collection or with your consent.

​

5. Cookies, Analytics, Advertising, and Similar Technologies

We and our service providers use cookies, pixels, tags, SDKs, local storage, log files, and similar technologies to operate the Services, remember preferences, secure accounts, analyze performance, diagnose errors, improve the user experience, and support advertising and measurement.

We currently use Google Analytics 4 for analytics and measurement. We also have the Meta/Facebook Pixel on the site and may use it, and Google Ads tools, for advertising, retargeting, conversion measurement, and audience measurement. When these tools are enabled, Meta and Google may receive information such as device identifiers, IP address, browser information, page URLs, event data, and interactions with the Services. These tools may involve "sharing" of personal information for cross-context behavioral advertising under California law.

You can control cookies through your browser settings. If you disable cookies, some parts of the Services may not function properly. Where required by law, we provide additional choices for analytics, advertising, sale/sharing, or similar technologies.

​

6. Error Monitoring, Diagnostics, and Session Replay

We use third-party error monitoring, performance diagnostics, and limited session replay tools to identify bugs, troubleshoot user experience issues, improve performance, maintain security, and operate the Services reliably. These tools may collect technical information such as browser type, device type, operating system, page URL, timestamps, error details, performance data, and limited interaction information.

We configure session replay tools to mask or block sensitive content where reasonably possible, including form inputs and sensitive page content. We do not intentionally use session replay to collect passwords, payment card data, government identifiers, or other sensitive personal information. Session replay is used for diagnostics and debugging and is not used for advertising or cross-context behavioral targeting.

​

7. Support Chat and Chatbot Recordings

We use third-party support and chatbot tools to provide customer support, chatbot, and live chat features on Rivly support pages and on our seller marketing site at sell.rivly.com. When you open or use the chat feature, the chat may be recorded and processed by a cloud-based service provider to provide support, route and respond to requests, maintain quality, troubleshoot issues, protect the Services, and improve the user experience.

Chat and chatbot interactions may include the messages you submit, contact information you provide, transcript metadata, timestamps, device and browser information, page or referrer context, and other information needed to provide support. The chat launcher or chat window may display an additional notice stating that the chat is recorded using a cloud service and is subject to our Privacy Policy or Privacy Notice. Please do not provide sensitive information in chat unless it is necessary for your support request. We do not use support chat transcripts for cross-context behavioral advertising.

​

8. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients:

Service providers and contractors: Hosting, cloud infrastructure, analytics, diagnostics, security, fraud prevention, payments, payouts, shipping, email/SMS, customer support, chatbot/live chat services, session replay, identity verification, marketing operations, and other business operations.

Payment and verification providers: Payment processing, payouts, bank account verification, KYC/KYB, fraud prevention, tax compliance, and financial reporting.

Advertising and analytics partners: Analytics, advertising, retargeting, conversion measurement, audience measurement, and performance measurement, including Meta/Facebook and Google where enabled.

Sellers, buyers, and marketplace participants: Order fulfillment, transaction communications, reviews, returns, support, dispute resolution, and marketplace integrity.

Professional advisors: Legal, accounting, insurance, audit, compliance, and other professional services.

Government authorities, law enforcement, and regulators: Legal compliance, lawful requests, safety, fraud prevention, enforcement of rights, and protection of users or the public.

Business transaction parties: Evaluation or completion of a merger, financing, acquisition, bankruptcy, reorganization, sale of assets, or similar transaction.

Other parties with your consent or at your direction: When you instruct us or authorize us to disclose information.

We do not sell personal information for money. However, some advertising, retargeting, and measurement tools may be considered a "sale" or "sharing" of personal information under certain state privacy laws because they may involve disclosure of online identifiers or internet activity for cross-context behavioral advertising.

​

9. Payments, KYC/KYB, and Financial Information

We use third-party providers, including Stripe and Plaid, for payment processing, payouts, bank account verification, KYC/KYB, fraud prevention, and related financial compliance. We do not directly store full payment card numbers or banking credentials unless expressly stated at the point of collection. Payment, banking, identity, and verification information is generally provided directly to these providers and handled under their privacy policies and terms.

We may receive limited information from these providers, such as payment status, payout status, account verification status, fraud signals, masked payment details, transaction identifiers, or other information needed to operate the marketplace and comply with legal obligations.

​

10. User-Generated Content and Public Areas

If you submit reviews, ratings, photos, videos, seller content, profile information, comments, or similar content, that information may be visible to other users or the public depending on the feature. Do not submit content that you do not want others to see or use.

​

11. Marketing Communications

We may use your contact information to send you marketing communications, newsletters, promotions, seller opportunities, rewards updates, and other information about Rivly. You can opt out of marketing emails by using the unsubscribe link in the message or contacting us. We may still send transactional, operational, legal, security, or account-related messages.

​

12. Retention of Personal Information

We retain personal information for as long as reasonably necessary and proportionate to the purposes described in this Privacy Policy, including to provide the Services, maintain accounts, process transactions, administer rewards and reviews, comply with legal obligations, resolve disputes, prevent fraud, enforce agreements, and maintain security.

Retention periods vary based on the type of information, the context in which it was collected, legal requirements, operational needs, and whether deletion is technically feasible. We may retain de-identified or aggregated information that no longer identifies you.

​

13. Security

We use administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure. We cannot guarantee absolute security, and you are responsible for maintaining the confidentiality of your account credentials.

​

14. Your Choices and Privacy Rights

Depending on your location and applicable law, you may have rights to access, correct, delete, receive a copy of, or restrict certain processing of your personal information. You may also have the right to opt out of certain uses or disclosures, including targeted advertising, sale or sharing of personal information, or certain profiling.

You may submit privacy requests by emailing support@rivly.com or by visiting https://support.rivly.com. We may need to verify your identity before fulfilling a request. Authorized agents may submit requests where permitted by law, subject to verification requirements.

You can also update certain account information directly through your account settings where available, unsubscribe from marketing emails using the unsubscribe link, and control cookies through your browser settings.

​

15. California Privacy Notice

This section supplements the rest of this Privacy Policy and applies to California residents to the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CCPA"), applies to Rivly.

California residents may have the following rights, subject to exceptions and verification requirements:

• Right to know/access: the right to request the categories and specific pieces of personal information we have collected about you and information about our collection, use, disclosure, sale, or sharing of that information.

• Right to delete: the right to request deletion of personal information we collected from you, subject to exceptions.

• Right to correct: the right to request correction of inaccurate personal information.

• Right to opt out of sale or sharing: the right to opt out of the sale or sharing of personal information, including sharing for cross-context behavioral advertising.

• Right to limit sensitive personal information: the right to limit certain uses and disclosures of sensitive personal information where required by law.

• Right to non-discrimination: the right not to be discriminated against for exercising privacy rights.

In the preceding 12 months, we may have collected the categories of personal information described in Section 2 and disclosed those categories for the business purposes described in Sections 4, 8, and 9. We may disclose identifiers, internet or electronic network activity, commercial information, approximate location, and inferences to advertising and analytics partners when advertising, retargeting, analytics, or measurement tools are enabled.

We do not sell personal information for money. We may "share" personal information for cross-context behavioral advertising through Meta/Facebook and Google advertising or measurement tools when those tools are enabled. You may opt out of sale or sharing of personal information, where applicable, by contacting us at support@rivly.com. Where required by law, we will also honor recognized opt-out preference signals, such as Global Privacy Control, that we are able to detect and process. If we make a "Your Privacy Choices" or "Do Not Sell or Share My Personal Information" link available on the Services, you may also use that link to submit an opt-out request.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

We use sensitive personal information only for permitted purposes, such as providing the Services, processing payments and payouts, verifying identity or eligibility, preventing fraud, maintaining security, and complying with law. We do not use sensitive personal information to infer characteristics about you.

​

16. Other State Privacy Rights

Residents of certain U.S. states may have additional privacy rights under applicable state privacy laws. Depending on your state and the applicability of those laws to Rivly, you may have rights to access, correct, delete, obtain a copy of, or opt out of certain processing of personal information, including targeted advertising, sale of personal information, or profiling in furtherance of decisions that produce legal or similarly significant effects. You may submit requests using the contact methods listed in this Privacy Policy.

​

17. International Users and GDPR/EEA Rights

Rivly is based in the United States. If you access the Services from outside the United States, your information may be transferred to, stored in, or processed in the United States and other jurisdictions that may not provide the same level of data protection as your jurisdiction.

Where the GDPR, UK GDPR, or similar laws apply, you may have rights to access, correct, delete, restrict or object to processing, withdraw consent, and receive a copy of your personal data in a portable format. You may also have the right to lodge a complaint with a supervisory authority. Our legal bases for processing may include performance of a contract, legitimate interests, consent, legal obligations, and protection of rights and security.

​

18. Do Not Track and Global Privacy Control

Some browsers offer a "Do Not Track" signal. Because there is no uniform industry standard for responding to Do Not Track signals, we do not currently respond to Do Not Track signals. Where required by applicable law, we honor recognized opt-out preference signals, such as Global Privacy Control, as a request to opt out of sale or sharing of personal information for the browser or device that sends the signal.

​

19. Children's Privacy

The Services are not intended for children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without required parental consent, we will take appropriate steps to delete that information. We do not knowingly sell or share personal information of consumers under 16 years of age.

​

20. Links to Other Sites

The Services may contain links to websites or services that we do not operate. We are not responsible for the privacy practices of third-party websites or services. We encourage you to review their privacy policies before providing information to them.

​

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last updated" date and will be effective when posted unless otherwise stated. We encourage you to review this Privacy Policy periodically.

​

22. Contact Us

If you have questions about this Privacy Policy or want to submit a privacy request, contact us at support@rivly.com or visit https://support.rivly.com.

​