Privacy Policy
DRAFT — pending counsel review. Not legal advice. This Privacy Policy explains how Ryva Labs collects, uses, shares, and protects information when you use our storefront and place orders, and the privacy rights available to you.
Information we collect
We collect information you provide directly — your name, email address, shipping and billing address, phone number, order history, account credentials, and the age and research-use acknowledgements you accept at the gate and at checkout — as well as messages you send to our support team. We also collect technical information automatically, such as your IP address, device and browser type, and usage data through cookies and similar technologies. We do not store full payment-card numbers; card details are handled directly by our payment processors.
How we use your information
We use your information to process and ship orders, verify eligibility and prevent fraud, provide customer support, send transactional messages such as order and shipping confirmations, operate and improve the site, and comply with our legal and tax obligations. We send marketing communications only where you have opted in, and you can unsubscribe at any time.
Cookies and analytics
We use cookies and similar technologies that are necessary for the site to function (for example, to keep you signed in) and, where applicable, to understand site usage through analytics. You can control or block cookies through your browser settings, though some features of the site may not work without them.
Payment processing
Payments are handled by third-party processors. Card, Apple Pay, Google Pay, and Zelle transactions are processed by our payment provider, and cryptocurrency payments are processed by NOWPayments. These providers receive the information needed to complete your transaction and handle it under their own privacy policies; we do not store your full card details on our systems.
Third-party processors
We share information with service providers only as needed to run our business and under agreements that require them to protect it. These include Supabase (database, authentication, and storage), Vercel (website hosting), Resend (transactional email), and NOWPayments (cryptocurrency payments), along with the shipping carriers that deliver your orders. We do not authorize these providers to use your information for their own purposes.
How we share information
We share personal information only with the service providers described above, and when required to comply with the law, enforce our terms, or protect the rights, safety, and property of Ryva Labs, our customers, or others. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
Data retention
We keep personal information for as long as needed to provide our services and fulfill the purposes described in this policy, including meeting legal, accounting, and tax requirements. When information is no longer needed, we delete or de-identify it, subject to any legal retention obligations.
Data security
We use reasonable technical and organizational safeguards — including encryption in transit (TLS), access controls, and PCI-compliant payment processing handled by our providers — to protect your information. No method of transmission or storage is completely secure, so while we work to protect your data we cannot guarantee absolute security.
Your rights (CCPA / CPRA)
If you are a California resident, you have the right to know and access the personal information we collect and how we use and share it; to request deletion of your information; to correct inaccurate information; to opt out of the sale or sharing of your personal information; to limit the use of sensitive personal information; and to not be discriminated against for exercising these rights. To make a request, contact us at support@ryvalabs.com; we will verify your request and respond within 45 days (with one permitted extension), and you may use an authorized agent. As stated above, we do not sell or share your personal information.
Automated decision-making
We do not use automated decision-making or profiling that produces legal or similarly significant effects about you, such as to deny service or set pricing. If this ever changes, we will update this policy and provide any disclosures and opt-out rights required by California law.
Children's privacy
Our site and products are intended for qualified researchers and are not directed to anyone under 21 years of age. We do not knowingly collect personal information from individuals under that age, and we will delete such information if we learn we have collected it.
Changes and contact
We may update this policy from time to time; the latest version will always be posted here, and material changes take effect when posted. Questions or privacy requests can be sent to support@ryvalabs.com.