Privacy notice · updated 10 November 2026
Privacy
Short version: no cookies, no tracking, only the data needed to answer you or do the work, and a "no" is always respected.
Who is responsible
Julien Palte (trading as RIVET), [postal address to be completed], enterprise number not registered yet (pilot phase). Contact for anything privacy-related: jhg.palte@gmail.com.
What is collected, and why
| Situation | Data | Purpose and legal basis | Kept for |
|---|---|---|---|
| You request a free scan | Name, work email, company, role, the company to scan, your note | Delivering the scan you asked for (steps at your request before a contract, GDPR art. 6(1)(b)). Follow-up emails about RIVET only if you ticked the box (consent, art. 6(1)(a)). | 12 months, or until you ask us to delete it |
| You order | Name, email, company, invoice details, what to research | Doing the work and invoicing it (contract, art. 6(1)(b); accounting law, art. 6(1)(c)). | Invoices: as long as accounting law requires (currently 10 years in Belgium). The rest: 2 years after the last order. |
| You receive a first email from us | Your name, role, work email and company, as published on your company's website, plus short quotes from that site | Offering a service relevant to your job (legitimate interest, art. 6(1)(f)), only where the e-privacy rules allow it without prior consent. Otherwise we don't email you. The first email always says where we found your address. | Deleted after 180 days without a reply. If you say no, only a one-way hash of your address is kept so you are never emailed again. |
| We send you a comparison page about your company | Text published on your company's website and on one competitor's website, quoted with links. No personal data beyond what those pages publish. | Showing, with a real example, what a dossier looks like (legitimate interest, art. 6(1)(f)). The page has an unlisted address, is not indexed by search engines and contains no tracking. | Taken offline when the conversation ends, at the latest 90 days after the first email, or at once if you ask |
| We research a company | Public information about companies. It can include names of people mentioned publicly, such as executives. | Producing competitor dossiers (legitimate interest, art. 6(1)(f)). | As long as the dossier is in use |
We never buy contact lists, never guess email addresses, and never sell or share your data with anyone for their own purposes.
Who processes data for us
- Netlify, Inc. (United States): website hosting and form submissions. Transfers are covered by the EU-US Data Privacy Framework and standard contractual clauses.
- Google Ireland Ltd (Gmail): our mailbox.
- Stripe: card payments, if you pay by card. Stripe acts as its own controller for payment data.
- An AI model provider (currently NVIDIA, United States): analyses public web pages, and drafts the first version of emails, which a person then rewrites and approves. It receives page text and the business details listed above, never payment data.
Cookies and tracking
This site sets no cookies and uses no tracking pixels, advertising tags or third-party fonts. There are no analytics. Our emails contain no tracking pixels either.
Your rights
You can ask for a copy of your data, its correction or its deletion, object to its use, or restrict it. An objection to marketing is final: we stop at once, no questions. Write to jhg.palte@gmail.com, or simply reply "no" to any email from us. You will get an answer within one month.
You can also complain to the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), Rue de la Presse 35, 1000 Brussels, dataprotectionauthority.be.