Privacy Policy

Effective Date: April 4, 2026 · Last Updated: April 4, 2026

Rivvet LLC, a Delaware limited liability company (“Rivvet,” “we,” “us,” or “our”), operates a free email health research alert service (the “Service”). This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you use the Service.

We never sell your personal health information. Your condition preferences are stored separately from your identity and are used only to deliver relevant research alerts to you.

1. Information We Collect

We collect only what is necessary to provide the Service:

  • Email address — to deliver research alerts and service communications.
  • State of residence — to comply with state-specific legal requirements (including the exclusion of Washington State residents).
  • Health condition preferences — the topics you select to receive research alerts about. We explicitly identify this as health-related data.

We do not collect your name, physical address, phone number, date of birth, insurance information, medical records, or any other demographic information.

2. How We Store Your Data

We use a decoupled data architecture designed to protect your privacy. Your email address is stored in one database table; your health condition preferences are stored in a separate table. These are linked only by an opaque internal identifier. This means that a breach of one table alone would not expose the connection between your identity and your health interests.

All data is encrypted at rest using AES-256 encryption and in transit using TLS 1.2+.

3. How We Use Your Data

  • To deliver personalized research alerts based on your selected conditions.
  • To include relevant affiliate links (e.g., Zocdoc specialist booking links) matched to your condition categories.
  • To improve and optimize the Service.
  • To comply with legal obligations.

4. Third Parties

We share limited data with the following service providers, solely to operate the Service:

  • Zocdoc — When you click an affiliate link, Zocdoc receives your click via a URL containing a specialty parameter and your general location. We do not transmit your email or condition preferences directly to Zocdoc.
  • Resend — Our email delivery provider. Resend processes your email address to deliver messages on our behalf.
  • Supabase — Our database hosting provider. Supabase stores your data in encrypted, access-controlled databases.
  • Plausible Analytics — Privacy-respecting website analytics. No personal data is collected.

We do not sell your personal health data. We acknowledge that the affiliate link model inherently conveys some information (i.e., that a user interested in a particular condition category clicked through to a scheduling platform). We disclose this transparently.

5. Washington State Exclusion

The Service is not offered to residents of Washington State. We implement technical measures including IP-based geolocation, ZIP code verification, and terms-of-service attestation to exclude Washington residents.

6. Your Rights

You have the right to:

  • Access your data — request a copy of the information we hold about you.
  • Correct your data — update your email or condition preferences.
  • Delete your data — request deletion of all your information. We will process deletion requests within 30 days and purge all data within 90 days.

To exercise any of these rights, email support@rivvethealth.com.

7. Data Retention

We retain your data for as long as your account is active. Upon account deletion (via unsubscribe or direct request), we delete your data within 30 days and purge all backups within 90 days.

8. Children

The Service is not intended for individuals under the age of 18. We do not knowingly collect data from anyone under 18. If we discover that we have collected data from a minor, we will promptly delete it.

9. Security

We implement industry-standard security measures including encryption at rest and in transit, access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure.

10. CAN-SPAM Compliance

Every email we send includes a clear unsubscribe link. Unsubscribe requests are processed within 2 business days. We will never charge a fee or require any information beyond your email address to process an unsubscribe request.

11. California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

  • Know what personal information we collect and how it is used.
  • Request deletion of your personal information.
  • Opt out of the sale of personal information (we do not sell personal information).
  • Request correction of inaccurate personal information.
  • Limit the use of sensitive personal information.
  • Not be discriminated against for exercising your rights.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email. Continued use of the Service after notice constitutes acceptance.

13. Contact

Rivvet LLC
Email: support@rivvethealth.com