Privacy Policy

1. Introduction

Ryvie is committed to protecting your privacy. This privacy policy explains how we collect, use and protect your personal data when you use our service.

2. Data collected

2.1 Signing in to your Ryvie account (Google Sign-In)

When you sign in to your Ryvie client area via Google, we only collect:

• Your email address: to create and identify your account
• Your name and Google identifier (OpenID): to secure your authentication and personalize your space

This sign-in uses the non-sensitive scopes openid, email and profile. We do not collect any other data from your Google account on this occasion.

2.2 Connecting your clouds to rDrive (Google Drive, Dropbox)

If you choose to connect a third-party storage service to the rDrive application on your Ryvie, our authentication gateway (cloudoauth-files.ryvie.fr) requests the following permissions — and only these:

How these permissions are used: our authentication gateway is only used to establish the OAuth connection. It stores your access tokens encrypted (AES-256) and hands them exclusively to your Ryvie device. Your file contents travel directly between your Ryvie device and Google Drive or Dropbox: they are never stored, analyzed or accessed by our servers.

Important: Ryvie (the company) does not access the content of your files. Data received from the Google Drive API is used solely to provide the synchronization feature you requested, in accordance with the Google API Services User Data Policy, including its “Limited Use” requirements. It is never sold, never used for advertising, and never used to train artificial-intelligence models.

You can revoke these permissions at any time from rDrive, from your Google account security settings (myaccount.google.com/permissions) or from your Dropbox account.

3. Use of data

We use your data only to:

• Email address and name (Ryvie account): allow you to sign in to your client area, secure your account and send you the emails strictly required by the service (address verification, password reset, order follow-up)
• OAuth tokens (Google Drive, Dropbox): allow your Ryvie device to synchronize your files with the services you have explicitly connected

Your file contents stay between your Ryvie device and the connected service. Ryvie (the company) neither sees nor accesses them.

We do not send any unsolicited email notifications and do not use your data for marketing or advertising purposes without your explicit consent.

4. Data sharing

We do not share, sell, or rent your personal data to third parties. In particular, data obtained from Google (Workspace) or Dropbox APIs is never transferred to third-party artificial-intelligence services, nor used to create, train or improve machine-learning models — whether ours or anyone else’s.

5. Storage, security and retention

Your data is stored securely (TLS encryption in transit, OAuth tokens encrypted with AES-256 at rest, strict access control). Your personal files (photos, videos, documents) stay with you, on your own Ryvie device: they are never stored on our servers.

Retention periods:

• Account data (email, name, identifier): kept while your account is active, deleted no later than 30 days after account deletion.
• OAuth tokens (Google Drive, Dropbox): kept encrypted while the connection is active; deleted immediately when you disconnect the service, revoke the authorization or delete your account.
• Synchronized file contents: never stored on our servers (direct transit device ↔ connected service).
• Technical logs: kept for a maximum of 90 days, for security and diagnostic purposes.
• Website audience statistics: aggregated data, kept for a maximum of 12 months.

Deletion procedure: you can request the deletion of your account and all associated data (including OAuth tokens) by writing to contact@ryvie.fr from the account email address. Deletion is effective within 30 days and confirmed to you by email. You can also revoke Ryvie’s access at any time from your Google or Dropbox account: the corresponding tokens then become unusable and are purged.

6. Artificial intelligence

Some applications available on Ryvie offer artificial-intelligence features. Their design follows this principle: your data is never used to train models.

• Self-hosted models (e.g. via Ollama): the model runs locally, on your own Ryvie device, within your isolated infrastructure. Processed data stays local and is never transmitted to the model provider, nor used for training or any other secondary purpose.
• Third-party AI services (with your own API key): if you connect a third-party AI service by providing your own API key, only the data you explicitly submit to that feature is sent to it, under the terms of the provider you chose.
• Isolation of Google and Dropbox data: data obtained through Google APIs (Google Drive) or Dropbox is not transmitted to third-party AI services and is not used to create, train or improve AI or machine-learning models, whether generalized or specialized.

7. Your rights

In accordance with the GDPR, you have the following rights:

• Right of access: you can request a copy of your data
• Right to rectification: you can correct your inaccurate data
• Right to erasure: you can request the deletion of your account and your data (see the procedure in section 5)
• Right to portability: you can retrieve your data in a structured format

8. Cookies

We only use cookies essential to the operation of the service (authentication session). No tracking or advertising cookies are used.

9. Changes

We reserve the right to modify this privacy policy. Any change will be published on this page with a new update date.

10. Contact

For any questions regarding this privacy policy or to exercise your rights, contact us at:

contact@ryvie.fr