Privacy Policy

1. Who we are

Retivo (“we”, “us”, “our”) is an autonomous AI customer success platform operated by Theoremus Ltd. This policy describes how we collect, use, and protect information when you use our website, dashboard, APIs, and related services (collectively, the “Service”).

2. Information we collect

Account information. Name, email address, company name, and billing details when you create an account.

End-user data. We process behavioral events (page views, feature usage, milestones) that you send to Retivo via our SDK, API, or integrations. This data belongs to you — we process it on your behalf to run playbooks and generate insights.

Usage data. We collect anonymized analytics about how you interact with the Retivo dashboard (pages visited, features used) to improve the Service.

Technical data. IP address, browser type, device information, and cookies necessary for authentication and security.

3. How we use your information

• To provide, maintain, and improve the Service
• To run autonomous playbooks and deliver messages on your behalf
• To train and improve our AI models using aggregated, de-identified data only
• To send transactional emails (account confirmations, billing receipts, security alerts)
• To detect and prevent fraud, abuse, and security incidents
• To comply with legal obligations

We do not sell your personal information or your end-user data to third parties.

4. Data processing & sub-processors

We use third-party sub-processors to operate the Service (hosting, email delivery, payment processing). A current list of sub-processors is available upon request. All sub-processors are bound by data processing agreements that require equivalent privacy protections.

5. Data retention

Account data is retained for the lifetime of your account plus 30 days after deletion. End-user behavioral data is retained according to your plan’s audit retention period (30 days to unlimited, depending on plan). You can request data export or deletion at any time.

6. Security

We implement industry-standard security measures including encryption in transit (TLS 1.3), encryption at rest (AES-256), role-based access controls, and regular security audits. All end-user data is isolated per tenant.

7. Your rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data
• Export your data in a portable format
• Object to or restrict processing
• Withdraw consent where processing is consent-based

To exercise any of these rights, contact us at privacy@retivo.ai.

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies. Analytics cookies are only set with your consent.

9. Changes to this policy

We may update this policy from time to time. We will notify you of material changes via email or a notice in the dashboard at least 30 days before they take effect.

10. Contact

For privacy-related questions, contact privacy@retivo.ai.