Legal

Privacy Policy

Last updated: September 13, 2026

Our Commitment to Your Privacy

At Rivernova, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our education consulting platform. We are committed to transparency and protecting your personal data in compliance with GDPR, CCPA, and other applicable privacy laws.

By using Rivernova, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

1. Information We Collect

1.1 Personal Information You Provide

When you create an account or use our services, we collect:

  • Account Information: Full name, email address, password (encrypted)
  • Academic Information: GPA, test scores, major, current school, graduation date
  • Career Goals: Intended career field, dream job, professional aspirations
  • Financial Information: Budget preferences for education (no payment card data stored by us)
  • Location Preferences: Preferred countries and regions for study
  • Communications: Messages you send through our AI advisor or support system

1.2 Automatically Collected Information

  • Usage Data: Pages visited, features used, time spent, search queries
  • Device Information: Browser type, operating system, device identifiers
  • Log Data: IP address, access times, referring URLs
  • Cookies: Session cookies, preference cookies, analytics cookies

1.3 Information from Third Parties

  • Authentication Providers: If you sign in with Google or other OAuth providers
  • Payment Processors: Transaction data from Stripe (we never see your full card number)

2. How We Use Your Information

  • ✓Provide Services: Match you with schools, generate AI recommendations, facilitate applications
  • ✓Personalization: Customize your experience based on your profile and preferences
  • ✓Communication: Send you service updates, match notifications, and educational content
  • ✓Analytics: Understand how users interact with our platform to improve services
  • ✓Security: Detect and prevent fraud, abuse, and security incidents
  • ✓Legal Compliance: Comply with legal obligations and enforce our terms
  • ✓Research: Aggregate anonymized data to improve education outcomes (with your consent)

What We DON'T Do

  • ✗We never sell your personal data to third parties
  • ✗We never share your data with schools without your explicit consent
  • ✗We never accept commissions that would bias our recommendations

3. How We Share Your Information

We may share your information only in the following circumstances:

Service Providers

We use trusted third-party services to operate our platform:

  • Supabase (database hosting and authentication)
  • Anthropic (AI-powered recommendations via Claude)
  • Perplexity (school research and data)
  • Stripe (payment processing)
  • Resend (transactional emails)

With Your Consent

We will share your information with schools or other parties only when you explicitly authorize us to do so.

Legal Requirements

We may disclose your information if required by law, court order, or government request.

Business Transfers

If Rivernova is acquired or merged, your information may be transferred to the new entity.

4. Your Privacy Rights

Depending on your location, you have the following rights:

Access

Request a copy of all personal data we hold about you

Correction

Update or correct inaccurate information

Deletion

Request deletion of your personal data (right to be forgotten)

Portability

Export your data in a machine-readable format

Opt-Out

Unsubscribe from marketing communications

Restrict Processing

Limit how we use your data

How to Exercise Your Rights

To exercise any of these rights, contact us at:

We will respond to your request within 30 days.

5. Data Security

We implement industry-standard security measures to protect your data:

  • ✓Encryption: All data is encrypted in transit (TLS/SSL) and at rest (AES-256)
  • ✓Access Controls: Strict role-based access to your data
  • ✓Regular Audits: Security assessments and penetration testing
  • ✓Secure Infrastructure: Hosted on SOC 2 compliant servers
  • ✓Monitoring: 24/7 security monitoring and incident response

Important: No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. Please use a strong password and enable two-factor authentication.

6. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: privacy@rivernova.com

Data Protection Officer: dpo@rivernova.com

For EU residents: You have the right to lodge a complaint with your local data protection authority.