Privacy Policy

1. Information We Collect

a) Information You Provide

• Name and contact details (email address, mobile phone number)
• Account credentials
• Resume and cover-letter uploads, and the profile, work history, education, projects, and skills you enter
• Job preferences, application notes, and the answers you provide for job applications
• Optional demographic and equal-opportunity information (see Section 4)
• Payment information, which is collected and processed directly by our payment provider (see Section 9)

b) Information From Connected Accounts

• If you connect your Gmail account, read-only email data as described in Section 3

c) Automatically Collected Information

• IP address
• Device and browser data
• Usage analytics
• Cookies and similar technologies (see Section 10)

2. How We Use Information

We use information to:

• Operate and maintain the platform
• Provide paid services and features
• Improve performance and usability
• Communicate updates and service notices
• Ensure security and prevent abuse
• Comply with legal obligations

Rivo Careers Inc. does not sell personal data.

3. Connected Email (Gmail) Access

If you choose to connect your Gmail account, you authorize Rivo to access certain email data on a read-only basis. We request only the gmail.readonly scope (plus openid and your email address). Rivo cannot send, delete, or modify any email in your account.

a) What We Read

• Applicant Tracking System (ATS) verification and confirmation emails, so we can confirm the ATS accounts Rivo creates on your behalf when applying to jobs
• Recruiter replies, interview invitations, and rejection notices, so we can automatically update your application tracker

b) How We Use This Data

We use connected-email data solely for the two features above: confirming ATS accounts created for auto-apply, and detecting application outcomes to keep your tracker current. We do not use it for any other purpose.

c) How to Revoke Access

You can disconnect Gmail at any time from within the Rivo app, or by revoking Rivo's access in your Google Account security settings (Google Account → Security → Third-party apps with account access). When you disconnect, your Gmail OAuth tokens are revoked immediately and are not retained.

d) Limited Use & Compliance

Rivo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data obtained through the Gmail API is never sold, leased, or used for advertising, and is used only to provide the disclosed features described above.

4. Demographic & Equal-Opportunity Information

Many job applications include voluntary equal-opportunity (EEO) sections. You may optionally provide demographic information so that Rivo can complete these sections for you. Providing this information is entirely optional and voluntary — you can decline, and doing so does not affect your access to or the quality of the service.

This information may include:

• Gender and pronouns
• Race or ethnicity
• Disability status
• Veteran status
• LGBTQ+ status
• In Canada, Indigenous identity and visible-minority status

We use this information solely to auto-fill the voluntary equal-opportunity sections of the job applications you ask us to submit. It is never sold. Because it is sensitive information, it is entirely optional and we collect it only if you voluntarily choose to provide it (see Section 13).

5. Auto Apply & Data Transmission to Employers

When you opt into the SMS agent and Auto Apply, Rivo acts as your authorized agent to fill and submit job applications on your behalf on third-party Applicant Tracking Systems (for example, Workday or Greenhouse), using the profile, resume, and answers you provided. Rivo does not fabricate or alter your information.

To do this, Rivo transmits the relevant application data — your resume, your application answers, and, if you provided it, your demographic/EEO and contact information — to the third-party ATS and the employer receiving the application. Once transmitted, that data is handled by the employer and its ATS provider under their own privacy policies, which are outside Rivo's control.

When you browse and apply manually on our free job board, you complete the application yourself on the employer's own page, and any submission occurs directly between you and that employer.

6. Sharing of Information & Service Providers

We do not sell your personal data. We may share data:

• With the trusted service providers (sub-processors) listed below, only as needed to operate the platform
• With third-party ATS providers and employers when you ask us to apply to a job on your behalf, or when you apply yourself (see Section 5)
• When legally required, or to protect Rivo's rights, our users, or platform integrity

We rely on the following sub-processors, each acting only on our instructions and only for the purposes described:

• Supabase — database, authentication, and file storage
• Stripe — payment processing
• PostHog — product analytics
• Vercel — application hosting and web analytics
• Telnyx — SMS delivery
• Google Cloud / Vertex AI — Gemini-powered AI features and the Gmail API
• Jina AI — text embeddings used for job matching

7. Your Privacy Rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your personal information
• Port your data by receiving a copy in a portable format

If you are in Canada, these rights are protected under the Personal Information Protection and Electronic Documents Act (PIPEDA). If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt out of the sale of personal information — and Rivo does not sell personal information.

To exercise any of these rights, email us at support@rivocareers.com. We will respond to your request within 30 days. We will not discriminate against you for exercising your privacy rights.

8. Data Retention

We retain personal information only as long as reasonably necessary to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements. Our specific retention practices are:

• Account and profile data is deleted within 30 days of a verified deletion request
• Uploaded resumes and documents are deleted when your account is deleted
• Gmail OAuth tokens are revoked immediately when you disconnect Gmail and are not retained afterward
• SMS consent and opt-out records are retained for up to 2 years to meet regulatory compliance obligations

You may request account deletion at any time by contacting support@rivocareers.com.

9. Payments & Billing

Payment card details are collected and processed directly by Stripe; Rivo does not store your full card information. Free accounts include 3 lifetime AI-tailoring credits, and paid plans include 200 credits per month from a shared pool. Subscriptions are billed through Stripe and can be cancelled anytime from your Settings; access continues through the end of the paid period, and no further renewal occurs after cancellation.

10. Cookies, Analytics & Tracking

We use cookies, browser storage, and similar technologies for two broad purposes:

• Essential cookies — required to run the platform, such as maintaining your session and authentication state and storing cached data (like job match scores and preferences) to improve performance. These cannot be turned off without breaking core functionality.
• Analytics cookies — used to understand how the platform is used so we can improve it. These are provided by PostHog (product analytics), Vercel Analytics (web analytics), and Stripe (payment and fraud-prevention functionality).

We also use server-side caching to store computed job match scores and recommendations. This cached data is tied to your account and is automatically refreshed when you update your resume or profile.

You can opt out of non-essential analytics cookies through our cookie-preferences mechanism where available, and you can manage or clear cookies and cached data at any time through your browser settings. Most browsers also let you send a “Do Not Track” or Global Privacy Control signal. Clearing cookies may require you to log in again and may temporarily increase page load times as data is recomputed.

11. International & Cross-Border Transfers

Rivo Careers Inc. is a Canadian corporation based in Toronto, Ontario, and serves users in Canada and the United States. Several of our service providers are located in the United States, so your personal information may be transferred to, stored in, and processed in the United States and other countries. These jurisdictions may have data-protection laws that differ from those in your home jurisdiction. Where required, we take steps to ensure your information receives an appropriate level of protection when it is transferred across borders.

12. Data Security

We implement commercially reasonable safeguards; however, no system is fully secure. Use of the platform is at your own risk.

13. Children's & Age Requirements

You must be at least 16 years old to use RIVO Careers, including the free job board, the SMS agent, Auto Apply, and to provide demographic or equal-opportunity information. We do not knowingly collect personal information from anyone under 16, and we will delete such information if we become aware of it.

14. SMS / Text Messaging

Rivo offers an SMS-based internship agent. If you provide your mobile number and opt in, we send you text messages to operate the service.

a) SMS Data We Collect

• Your mobile phone number
• Your consent timestamp and the source of your opt-in
• The content of messages you exchange with Rivo (to provide the service)
• Delivery and opt-out status

b) How We Use SMS Data

We use this information solely to provide the internship discovery and application service — texting you internship matches, letting you approve or decline them, applying on your behalf, sending confirmations and account notifications, and honoring your STOP, HELP, and notification-preference requests.

c) We Do Not Share or Sell Your SMS Opt-In Data

Mobile opt-in information, SMS consent, and phone numbers collected for text messaging are not shared or sold to third parties or affiliates for their own marketing purposes. We share this data only with the messaging carrier and provider needed to deliver your texts, and only as required to operate the service or comply with law.

d) Message Types, Frequency & Rates

Messages include internship matches, application updates, and account notifications. Message frequency varies based on new matches and your activity. Message and data rates may apply.

e) Opting Out & Getting Help

You can stop receiving texts at any time by replying STOP; we record your opt-out and stop sending you messages. Reply HELP for help. For more information, see our Terms of Use.

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date above and, where appropriate, notify you. This Policy is governed by the laws of the Province of Ontario, Canada.

16. Contact Information

For questions, concerns, or to exercise your privacy rights, contact:

Rivo Careers Inc.
Toronto, Ontario, Canada
Email: support@rivocareers.com