1. Introduction
CONSULTING IT R&R CORP ("CONSULTING IT R&R CORP", "we", "our", "us") respects your privacy and is committed to protecting the personal data of visitors and users of the website rivdara.com (the "Site"). This Privacy Statement explains what information we collect, how we use it, with whom we share it, how we protect it, and what your rights are regarding it. This Statement should be read in conjunction with our Terms and Conditions of Use and our Cookie Policy.
RivDara is the commercial name under which CONSULTING IT R&R CORP operates and offers its services through the Site; any reference to "RivDara" shall be understood as a reference to CONSULTING IT R&R CORP.
This Statement was prepared taking into account Section 5 of the Federal Trade Commission Act (FTC Act, 15 U.S.C. § 45), which prohibits unfair or deceptive trade practices—including inaccurate privacy statements; the Florida Deceptive and Unfair Trade Practices Act ("FDUTPA", Fla. Stat. § 501.204); the Florida Information Protection Act ("FIPA", Fla. Stat. § 501.171); and the CAN-SPAM Act (15 U.S.C. § 7701 et seq.) for email marketing communications. CONSULTING IT R&R CORP is a private IT consulting company and does not currently meet, as of the date of this Statement, the revenue and activity thresholds that trigger the specific obligations of the Florida Digital Bill of Rights ("FDBR", Fla. Stat. § 501.701 et seq., applicable to "controllers" with more than one billion dollars in global annual gross revenues that meet certain additional criteria); however, we voluntarily adopt several of its principles as a best practice for transparency.
2. Scope of this Statement
This Statement applies to the personal information we collect through the Site, including the contact/quote form and newsletter subscription. It does not apply to information we collect within the framework of an IT consulting services contract already formalized with a client, which may be governed by additional confidentiality and data protection terms agreed upon in said contract.
3. Information We Collect
3.1 Information You Provide Directly to Us
- Contact form / quote request: Full name, company name, job title, email address, phone number, and the content of the message or description of the project/service of interest.
- Newsletter subscription: Name and email address.
- WhatsApp messages: If you choose to contact us via the WhatsApp button available on the Site, we may receive your phone number, the name and profile picture you have configured in that application, and the content of the messages you send us. This channel is operated through the WhatsApp platform, owned by Meta Platforms, Inc., whose data processing is additionally governed by the WhatsApp Privacy Policy, available at https://www.whatsapp.com/legal/privacy-policy.
- Any additional information you choose to voluntarily include in your communications with us.
3.2 Information Collected Automatically
When you visit the Site, we automatically collect certain technical information through cookies and similar technologies, as described in detail in our Cookie Policy, including: IP address (or its geographic approximation), browser type and version, operating system, pages visited, time spent on pages, referring site, and device/cookie identifiers. We use web analytics tools (such as Google Analytics) and advertising/retargeting tools (such as Meta Ads/Meta Pixel and Google Ads) that may collect this information. You can manage your preferences at any time through the Site's cookie consent banner.
3.3 Information We Do NOT Collect
The Site is not designed to process online payments, does not require user account creation or login, and does not intentionally collect sensitive categories of data (e.g., health information, biometric data, sexual orientation, ethnic origin, or religious affiliation), unless you choose to voluntarily include such information in the message field of the contact form, which is neither necessary nor recommended.
4. How We Use Your Information
We use the information collected for the following purposes:
- To respond to your requests for information, quotes, or contact.
- To evaluate and, where appropriate, prepare commercial proposals for IT consulting services.
- To send you our newsletter and marketing communications, solely if you have voluntarily subscribed or given your consent, and always with the option to unsubscribe.
- To manage, operate, maintain, and improve the Site, including the analysis of traffic and browsing behavior in an aggregated form.
- To show you relevant advertising of our services on other platforms using retargeting tools, when you have given your consent for advertising cookies.
- To comply with legal obligations, resolve disputes, and enforce our agreements and policies.
- To detect and prevent fraud, abuse, or unauthorized activities on the Site.
We do not use your personal information to make automated decisions that produce significant legal effects on you, nor do we use it for purposes other than those described herein without obtaining your additional consent when required by law.
5. Marketing Communications and the CAN-SPAM Act
If you subscribe to our newsletter or consent to receive marketing communications, we will comply with the requirements of the CAN-SPAM Act, including: clearly and accurately identifying the sender and not using misleading header information; not using deceptive subject lines; identifying the message as an advertisement where applicable; including our valid physical postal address; and including in every email a clear and visible mechanism to unsubscribe. We will process any unsubscribe request within a maximum period of ten (10) business days, and we will not sell or transfer your email address to third parties for marketing purposes once you have unsubscribed.
6. With Whom We Share Your Information
We do not sell your personal information. We may share your information solely with:
- Service providers ("processors"): Companies that provide us with web hosting services, analytics tools (e.g., Google Analytics), email marketing platforms (e.g., Mailchimp or another newsletter platform), CRMs, and digital advertising tools (e.g., Meta/Facebook, Google Ads), who process data on our behalf and are contractually bound to protect its confidentiality.
- Professional advisors: Lawyers, accountants, and auditors, when necessary for business operations.
- Competent authorities: When required by law, court order, or legal process, or to protect our rights, property, or safety, or those of third parties.
- In the event of a merger, acquisition, corporate reorganization, or sale of assets, in which case information may be transferred as part of that transaction, subject to protections equivalent to this Statement.
7. Data Transfer and Storage
CONSULTING IT R&R CORP operates in the United States, and the information we collect is stored and processed primarily on servers located in the United States, through our hosting providers and other service providers. If you contact us from outside the United States, you understand and agree that your information will be transferred to and processed in the United States, where data protection laws may differ from those of your country of residence.
8. Information Security
We implement reasonable technical, administrative, and organizational measures (such as encrypted HTTPS/SSL connection on the Site, access control, and best practices from our hosting and email providers) to protect your personal information against unauthorized access, loss, alteration, or improper disclosure. However, no method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee its absolute security.
In accordance with the Florida Information Protection Act (FIPA, Fla. Stat. § 501.171), in the event of a security breach compromising personal data, we will notify affected individuals as soon as possible and, in any case, within a maximum period of thirty (30) calendar days from the determination of the breach, barring any extension permitted by law. If the breach affects 500 or more Florida residents, we will also notify the Department of Legal Affairs of the State of Florida (Office of the Attorney General) within the same period.
9. Data Retention
We retain your personal information for as long as reasonably necessary to fulfill the purposes described in this Statement, including following up on your request, keeping you subscribed to the newsletter while you do not unsubscribe, and complying with applicable legal, accounting, or tax obligations. Subsequently, we will securely delete or anonymize your information, unless the law requires or permits a longer retention period.
10. Google User Data
HiRiv is an artificial intelligence agent platform operated by Negocios Integrales CMJ, S.A. de C.V. ("R&R IT Consulting"), which operates under the brand "RivDara" and is the data controller for your personal data. When you connect your Google account, you will see the application listed as RivDara. This section explains what data we obtain from Google, how we use it, and how we protect it.
HiRiv lets you optionally connect your Google Calendar account so your AI agent can check your availability and schedule appointments on your behalf.
10.1 Data We Access
When you connect your Google account, RivDara requests only the following permissions:
- Basic account information (openid, email): your Google email address, to show you which account your calendar is connected to.
- Events on your calendars (calendar.events.owned): allows viewing, creating, and editing events on calendars you own. HiRiv uses it only on your primary calendar, to determine your availability and create the appointments your agent schedules.
We do not access your Google contacts, emails, or files, or any calendars you do not own.
10.2 How We Use This Data
We use Google Calendar data exclusively to:
- Check your availability before proposing times to your customers.
- Create appointments confirmed by your agent on your calendar.
- Show you the status of your Google Calendar connection.
To propose times, certain information from your events may be processed by our artificial intelligence provider, OpenAI, which acts on our behalf under contract, solely to generate your agent's response, and is not permitted to use it to train its models.
10.3 Limited Use
RivDara's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- We do not use Google user data, whether raw, aggregated, or derived, to develop, train, or improve artificial intelligence or machine learning models, whether our own or third parties'.
- We do not sell Google user data.
- We do not transfer this data to third parties, except to service providers that process it on our behalf to provide the features described above, as required by law, or as part of a merger or acquisition with prior notice.
- We do not use this data for advertising, or to determine creditworthiness or for lending purposes.
- No one on our team reads your Google data, except with your explicit consent, when necessary for security purposes or to comply with the law, or when the data is aggregated and anonymized for internal operations.
10.4 Storage and Security
We store, in encrypted form, the access and refresh tokens Google provides to us, along with the email address of the connected account and a record of the appointments your agent schedules. We do not store copies of any other events on your calendar. Data is always transmitted over encrypted connections (HTTPS/TLS).
10.5 How to Disconnect Your Account and Delete Your Data
You can disconnect Google Calendar at any time from Ajustes → Integraciones → Calendario → Desconectar (Settings → Integrations → Calendar → Disconnect) in HiRiv, or revoke access from your Google Account permissions page, where the connection appears as "RivDara". When you disconnect, we delete the access and refresh tokens and the associated email address.
To request deletion of any other data, write to privacidad@rivdara.com. We will handle your request within a maximum of 20 business days.
11. Your Rights and Choices
Regardless of your place of residence, as a best practice and to the extent operationally feasible, you may exercise the following rights regarding your personal information in our possession by sending your request to privacy@rivdara.com:
- Access: Request confirmation of whether we process your information and obtain a copy of it.
- Correction: Request the correction of inaccurate or incomplete information.
- Deletion: Request the deletion of your personal information, subject to applicable legal exceptions (e.g., current contractual or legal obligations).
- Objection / marketing opt-out: Unsubscribe from our newsletter at any time via the "unsubscribe" link included in each email, or by contacting us directly.
- Cookie preferences: Manage or withdraw your consent for non-essential cookies through the Site's cookie banner, as detailed in our Cookie Policy.
We will respond to verifiable requests within a reasonable timeframe. If you are a resident of California or another state with a comprehensive consumer privacy law (e.g., the California Consumer Privacy Act, "CCPA/CPRA"), you may have additional specific rights under that law; please contact us and we will evaluate your request in accordance with the regulations applicable to you.
12. Children's Privacy
The Site is not directed to children under 13 years of age, and we do not intentionally collect personal information from children under that age, in compliance with the Children's Online Privacy Protection Act (COPPA). If you become aware that a child has provided us with personal information without the consent of a parent or guardian, please contact us so we can proceed to delete it.
13. Third-Party Links
The Site may include links to social networks or other third-party sites. This Statement does not apply to the privacy practices of such third parties, so we recommend that you review their privacy policies independently.
14. Changes to this Privacy Statement
We may update this Privacy Statement periodically to reflect changes in our practices or applicable law. The current version will always be available on the Site, indicating the date of the last update. We recommend that you review this Statement periodically.
15. Contact
If you have questions, comments, or wish to exercise any of the rights described in this Statement, you can contact us through:
- CONSULTING IT R&R CORP
- Address: 111 SW 3rd St, Suite 301, Miami, FL, United States, 33130
- Email: privacy@rivdara.com
- Phone: +1 (350) 223-9008
- Website: www.rivdara.com