RivoApp ("we", "us") respects user privacy. This policy describes how we collect, use, and protect your personal data in accordance with GDPR and LGPD.
1. Data We Collect
- Account data: name, email, tax ID (CPF), phone
- Usage data: trips purchased, packages sent, coupons redeemed
- Technical data: device model, OS, error logs
- Payment data: processed via Asaas (we do not store credit cards)
2. How We Use Your Data
- Process ticket and package purchases
- Send notifications about trips, package status, promotions
- Calculate and credit loyalty program points
- Comply with legal and tax obligations
- Improve the app and prevent fraud
3. Data Sharing
We share data only with:
- Asaas: payment processor (encrypted)
- Transport companies: data needed to issue tickets
- Authorities: when required by law
We never sell your personal data.
4. Your Rights (GDPR Art. 15-22)
- ✅ Access your personal data
- ✅ Rectify incorrect data
- ✅ Export your data (portability)
- ✅ Delete your account and all data
- ✅ Revoke consents
5. Security
We use TLS/SSL encryption, bcrypt password hashing, Sanctum tokens, and rate limiting.
6. Cookies
We use essential cookies for authentication only. We do not use advertising tracking cookies.
7. Data Retention
We retain your data while your account is active. After deletion, data is anonymized within 30 days (except tax obligations: 5 years).
8. Data Protection Officer
Email: contato@rivoapp.com.br
Contact:
RivoApp
Email: contato@rivoapp.com.br