Privacy Policy
Draft. This document is being reviewed by counsel and is not yet in effect. Questions: [email protected].
This policy explains what Viromi Corp ("RiverBooks", "we") collects when you use RiverBooks, why, and who we share it with. For the records your business keeps about its own customers and vendors, we act on your behalf as described in the Data Processing Addendum.
What we collect
- Account details: your name, email address, sign-in credentials (passwords are stored only as hashes) and security settings.
- Business records you enter or connect: business profile, customers and vendors, invoices, payments, bank and card transactions from connected accounts, receipts, mileage, tax settings and contractors' taxpayer ID numbers (encrypted).
- Billing details: your subscription status. Card details are handled by Stripe and never reach our servers.
- Technical data: IP address, browser type and request logs, used for security, rate limiting and fixing errors. A session cookie keeps you signed in; we don't use advertising cookies or trackers.
How we use it
To run the Service for you (bookkeeping, invoicing, payments, reminders, tax figures), to secure it, to support you when you ask, to bill for subscriptions, and to tell you about your account. We don't sell personal information and we don't use your business records for advertising.
AI features
When you use features that rely on AI (suggested bank categories, reading receipts, River, the monthly summary), the records needed for that request are sent to Anthropic to produce the result, and processed under Anthropic's commercial terms for its API.
Who we share it with
Service providers that process data for us, listed with their purpose in the Data Processing Addendum (for example our host, Stripe, Plaid, Anthropic, and our email and text-message providers). Your business's records are visible to the people you invite into it. We disclose data when the law requires it, and to a successor if RiverBooks is sold, under this policy.
How long we keep it
While your account is open. After you close it we delete your business's records within 90 days, except what we must keep for our own legal, tax or security obligations. Encrypted backups roll off on their normal schedule (up to 12 months).
Your choices and rights
You can see, correct and export your data in the app, and close your account. You can also ask us to access, correct or delete personal information, or to explain how we use it, at [email protected]; we'll respond within 30 days.
Security
See our security page. If a breach affects your personal information we'll notify you as the law requires.
Children
RiverBooks is for businesses and isn't directed to children under 16.
Changes
We'll post changes here and email account owners before material changes take effect.