Rivo

Privacy Policy

Last updated: January 2026

1. Introduction

Rivo AB ("Rivo," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our peer-to-peer car sharing platform.

We process personal data in accordance with the General Data Protection Regulation (GDPR) and Swedish data protection laws.

2. Information We Collect

2.1 Information You Provide

  • Account information: Name, email, phone number, date of birth
  • Identity verification: Government ID, driver's license, photos
  • Payment information: Credit/debit card details, bank account for payouts
  • Vehicle information (Hosts): Registration, photos, location
  • Communications: Messages with other users, support inquiries

2.2 Information Collected Automatically

  • Device information: IP address, browser type, operating system
  • Usage data: Pages visited, features used, search queries
  • Location data: With your consent, for finding nearby vehicles
  • Cookies: Session and preference cookies (see Cookie Policy)

2.3 Information from Third Parties

  • Identity verification services
  • Payment processors
  • Insurance partners (for claims processing)

3. How We Use Your Information

We use your information to:

  • Provide and maintain the Platform
  • Process bookings and payments
  • Verify your identity and eligibility
  • Facilitate communication between Hosts and Renters
  • Process insurance claims
  • Send booking confirmations and reminders
  • Improve our services and user experience
  • Detect and prevent fraud
  • Comply with legal obligations
  • Send marketing communications (with your consent)

4. Legal Basis for Processing

We process your data based on:

  • Contract: To fulfill our agreement with you (bookings, payments)
  • Legal obligation: Tax records, fraud prevention, insurance requirements
  • Legitimate interests: Platform improvement, security, analytics
  • Consent: Marketing communications, location tracking, cookies

5. Information Sharing

We share your information with:

5.1 Other Users

When you book a vehicle, we share your name and profile photo with the Host. Hosts see your phone number only after a booking is confirmed. We never share your exact address or ID documents with other users.

5.2 Service Providers

  • Payment processors (Stripe)
  • Identity verification providers
  • Cloud hosting (AWS)
  • Analytics services
  • Customer support tools

5.3 Insurance Partners

We share booking and claim information with our insurance partners to provide coverage and process claims. This includes driver information, vehicle details, and accident reports.

5.4 Legal Requirements

We may disclose information when required by law, court order, or to protect our rights, safety, or property.

6. Data Retention

We retain your information for:

  • Account data: Until you delete your account, plus 3 years
  • Booking records: 7 years (tax/legal requirements)
  • Payment data: 7 years
  • Insurance claims: 10 years
  • Messages: 2 years after booking
  • Marketing preferences: Until you unsubscribe

7. Your Rights

Under GDPR, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Restriction: Limit how we process your data
  • Portability: Receive your data in a portable format
  • Object: Object to processing based on legitimate interests
  • Withdraw consent: At any time, for consent-based processing

To exercise these rights, contact us at privacy@rivo.se or through your account settings.

8. Data Security

We implement appropriate security measures to protect your data:

  • Encryption in transit (TLS) and at rest
  • Regular security audits
  • Access controls and authentication
  • Employee training on data protection
  • Incident response procedures

9. International Transfers

Your data may be processed in countries outside the EEA. When this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

10. Children's Privacy

Rivo is not intended for users under 18. We do not knowingly collect data from children. If we learn we have collected data from a child, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or through the Platform. Your continued use after changes constitutes acceptance.

12. Contact Us

For privacy-related inquiries or to exercise your rights:

Data Protection Officer
Rivo AB
Email: privacy@rivo.se
Stockholm, Sweden

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at imy.se.