Privacy Policy

Effective Date: July 16, 2025

1. Introduction

Post Holdings LLC, d/b/a Rviewo ("Rviewo," "we," "us") is committed to protecting your privacy. [cite_start]This Privacy Policy explains how we collect, use, store, and share your personal data when you use our website and services (the "Service"), or otherwise interact with us, such as by signing up for a waitlist. [cite: 73, 74] [cite_start]This policy is designed to comply with the EU's General Data Protection Regulation (GDPR) and other applicable privacy laws. [cite: 75]

2. Who We Are (Data Controller)

The data controller responsible for your personal data is:
Post Holdings LLC
2308 Plum Woods Dr, Sellersburg, IN 47172, USA
contact@rviewo.com

3. Data We Collect

[cite_start]

We collect different types of data depending on how you interact with our Service. [cite: 78]

a. For Business Users (Account Holders):

Account Data: Full Name, Email Address, Hashed Password. [cite: 80]
Business Profile Data: Business Name, Type, Location, Description. [cite: 81]
User Content: Survey goals and details you provide. [cite: 82]
Uploaded Files: Profile Picture, Business Logo. [cite: 83]

b. For Survey Respondents ("Rviewers"):

Currently, Rviewers participate as guests. [cite_start]We collect: [cite: 85]

Survey Responses: Your ratings, text answers, and choices for the survey you are taking. [cite: 86]
Email Address: Only if you provide it and explicitly consent to receive a copy of your answers or a reward/discount code. [cite: 87]

c. Automatically Collected Data (All Visitors):

Usage Data: IP Address, browser type and version, pages visited, time spent on pages, and other diagnostic data collected via cookies and similar technologies. [cite: 89]

4. How We Use Your Data and Our Legal Basis (GDPR)

[cite_start]

The following table outlines our data processing activities: [cite: 90]

Purpose of Processing	Data Used	Legal Basis
To provide, operate, and maintain your Business User account	Account & Profile Data	Performance of a contract with you
To generate surveys using our AI engine based on your inputs	User Content	Performance of a contract with you
To communicate with you (service updates, support)	Email Address	Performance of a contract; Legitimate Interest
To process rewards for Rviewers	Email Address	Consent
To improve our Service and train our AI models	Pseudonymized and Aggregated User Content & Responses	Legitimate Interest
To ensure the security of our Service	Usage Data, Account Data	Legitimate Interest
To send you marketing communications (if you opt-in)	Email Address	Consent

5. Data Sharing and Third-Party Sub-processors

We do not sell your personal data. [cite_start]We only share it with trusted third-party service providers (sub-processors) to operate our Service: [cite: 93, 94]

Google Cloud/Firebase (USA): For hosting, database storage, and authentication. [cite: 95]
Google Vertex AI (USA): For processing User Content to generate surveys. [cite: 96]
Payment Processor (Future): For handling payments from Business Users. [cite: 97]
Reward Fulfillment Service (Future): For distributing rewards to Rviewers. [cite: 98]

6. International Data Transfers

Rviewo is based in the United States. Your personal data is processed and stored on servers located in the USA. For users in the European Economic Area (EEA), this constitutes a transfer of personal data outside the EEA. [cite_start]We ensure this transfer is lawful by relying on Standard Contractual Clauses (SCCs) as the legal basis, which are incorporated into our data processing agreements with our sub-processors like Google. [cite: 99, 100, 101, 102]

7. Data Security and Retention

[cite_start]

Security: We implement appropriate technical and organizational measures (e.g., encryption, access controls) to protect your personal data against unauthorized access, loss, or destruction. [cite: 104]

[cite_start]

Retention: We retain your data for the following periods: [cite: 105]

Account Information: Deleted 90 days after you request account closure. [cite: 106]
Active Survey Data: Deleted 90 days after the associated Business User account is closed. [cite: 107]
Pseudonymized Survey Responses: May be retained indefinitely for analytical and service improvement purposes, as this data is no longer directly attributable to an individual without additional information kept separately. [cite: 108]

8. Your Data Protection Rights (GDPR)

[cite_start]

If you are in the EEA, you have the following rights regarding your personal data: [cite: 109]

The right to access: You can request copies of your personal data. [cite: 110]
The right to rectification: You can request that we correct any information you believe is inaccurate. [cite: 111]
The right to erasure: You can request that we erase your personal data, under certain conditions. [cite: 112]
The right to restrict processing: You can object to our processing of your personal data, under certain conditions. [cite: 113]
The right to data portability: You can request that we transfer the data we have collected to another organization, or directly to you. [cite: 114]

To exercise these rights, please contact us at contact@rviewo.com. We will respond to your request within 30 days. [cite_start]You also have the right to lodge a complaint with a data protection authority. [cite: 115, 116]

9. Children's Privacy

[cite_start]

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from anyone under 18. [cite: 117]

10. Changes to This Privacy Policy

We may update this policy from time to time. [cite_start]We will notify you of any changes by posting the new Privacy Policy on this page. [cite: 118, 119]