Privacy Policy

Privacy Policy (summary)

This is a machine-assisted English summary. The Russian version of this document is the authoritative one.

Riverdell is an order-tracking service for freelancers. The operator processes personal data under Federal Law No. 152-FZ, collecting only the minimum needed to run the service: email and/or a numeric Telegram ID for sign-in (or, when you sign in with Yandex ID, the numeric Yandex account ID and email received from Yandex ID, operated by a Russian company), account data (user number, interface language, last sign-in date, consent record), the order data you enter yourself (order title and description, client name, payment form, dates, amounts, the product or service of the order and its quantity, extra services, expenses, payments, links to external materials with their names, attached files including closing documents), the “Products & services” list you keep yourself to fill in orders (item type, name, description, price and expenses — deleted together with your account), the client contact details you may choose to add to your client list (phone, email, address and a note — kept until you erase them and deleted together with your account), and support conversations with attachments. We do not collect your Telegram username or phone number. The free tier of the mobile apps shows ads served by Yandex Ads (Yandex LLC, Russia); its SDK processes the advertising identifier (on iOS only with tracking permission), IP address at request time, device model, OS version and language as an independent operator, and its built-in AppMetrica module reports SDK diagnostics and app crashes to Yandex anonymously; in the PRO tier no ads are shown and we do not start the ad SDK. On the PRO plan you can create a link to an order for your client: without signing in it shows the order title, status, deadline and the number of your active orders ahead of it — never titles or details of other orders. The client may leave an email there and choose what to be notified about; the address is used only for emails about that order, starts working after confirmation, and is deleted on unsubscribe, when the link is disabled, the order or your account is deleted, or 30 days after the order is completed or cancelled (unconfirmed addresses after 3 days). For usage statistics and ad measurement we use MyTracker (VK LLC, Russia) in every tier and in guest mode: the app SDK sends the advertising identifier (on iOS only with tracking permission), install identifiers, device model, OS, language, screen size, carrier and connection type, IP address, launches and sessions, and the events sign-up, sign-in and trial ended; the website counter uses cookies and sends the IP address, page address, referrer and browser details. To see which channels bring sign-ups, the website keeps in its own cookie (rd_acq, 30 days) where you came from — the campaign tags of the link (utm_source, utm_medium, utm_campaign) or the domain of the referring site, never the page address — and saves it to your account when you sign up (the apps record only the app type); it is used in our anonymised statistics only and deleted with your account. Signed-in MyTracker users are identified there only by a pseudonymous ID from which neither the email nor the account number can be derived; no order data, amounts, client details or location are sent. You can block the web counter with browser settings or a blocker, and limit the advertising identifier in your device settings. The RuStore push SDK on Android keeps its own device identifier and reports its diagnostics to VK LLC (Russia). Your tax ID and name are stored only if you switch on «Remember my details» when creating a certificate of completion, and are erased the moment you switch it off; the client details and the signature you draw or upload are used once, to produce the document, and are never stored. A generated certificate is kept only if you attach it to the order yourself or create a share link for your client — such a link and its file live 30 days and are then deleted automatically; the certificate journal keeps only the number, date, total and order links; a client email address you type to send the document is used once and never written to the database. The PRO tier is paid through YooKassa (YuMoney NBCO LLC, Russia): we never see your card details and keep a payment journal (amount, date, payment ID, status) for 5 years as required by accounting law; the receipt email is removed from it when you delete your account. Android push notifications are delivered through RuStore (VK LLC, Russia), which receives the device token and the notification text; tax-ID lookups in the document wizard query the Federal Tax Service registry and DaData (Dadata LLC, Russia) with the tax ID only.

Order data and your client list contain information about third parties (your clients). By entering it you confirm you have a lawful basis to process it; for that information you act as an independent controller, and we process it on your behalf only to provide the tracking features. The service is free — we do not process or store your payment data. We do not store IP addresses: an IP is used in memory at request time for abuse protection only and is never written to the database.

Online price list. A PRO user can publish a price list by link: the title, subtitle, page address and logo or photo they entered or uploaded themselves (e.g. name, city, contact) and the selected items from their Products & services — name, description, price and item photos; expenses are never published. Anyone with the link can see the page; it is hidden from search engines, stops opening while the user has no PRO, and is deleted on the user’s command or together with the account.

Item photos. A PRO user can upload up to three photos to an item in Products & services. The operator keeps them only re-compressed (at most 2000 pixels on the long side plus a small preview); photo metadata — including location, capture date and device model — is removed on upload and never stored. Photos are visible to the user and to clients only in the user’s online price list, while the item is selected there and the user has PRO. They are deleted with the item, on the user’s command or together with the account.

Promo codes and ambassador codes. The operator keeps a record of promo code use (with the payment record when a code is applied at payment). The operator issues personal ambassador codes to selected users. When a new user applies such a code, the record links their account to the ambassador’s account: the user who applied it gets bonus days right away, and the ambassador gets part of their bonus days right away and the rest after that user’s first payment, which the operator records for this purpose. The ambassador only receives notices that the code was applied and that the bonus was granted — the invitee’s email, account number and other details are not disclosed.

Friend invitations. Every user has a personal invitation code and link. When a new user signs up with such a link or enters the code, the operator keeps a record linking their account to the inviter’s account, how it was used (link or code) and when bonus days were granted to both — after the invitee confirms their email. To make sure one mailbox gets the bonus only once under different addresses, the operator keeps a hash of the invitee’s address without tags and dots (the address cannot be recovered from it). The code from the link is kept in a browser cookie for 30 days until sign-up. The inviter only receives a notice that the bonus was granted — the invitee’s email, account number and other details are not disclosed. These records are deleted together with the account.

Data may be shared only as needed with the hosting provider, the email provider, the payment operator, the MyTracker analytics service (VK LLC), and with authorized state bodies as required by law; all of them are registered in Russia and process data inside Russia. We never sell your data. Databases are hosted on servers in Russia, and no cross-border transfer takes place: we do not send personal data to foreign persons or organisations. Notifications are delivered by email and inside the service; deadline reminders in the mobile apps are scheduled by the device itself from data already on it.

Retention limits: support attachments 90 days; support conversations 1 year after a ticket is closed; in-app notifications 180 days; delivery records of service mailings 180 days; administrator audit log 3 years; payment journal 5 years; encrypted database backups up to 1 year (deleted-account data may persist there until they expire). An account not signed into for 180 days is anonymised automatically — signing in resets that clock.

Security includes HTTPS in transit, irreversible password hashing, encrypted database backups that only the holder of the private key can decrypt, order files accessible only to their owner, and role-based access: support staff see your user number but not your contact details.

You may request access, correction or deletion of your data, withdraw your consent, and complain to the supervisory authority (Roskomnadzor) or a court. You can export your orders as an Excel file and delete your account yourself at any time from the Profile page — deletion is immediate and irreversible and removes your orders, products & services list, client contacts and files. For anything else, contact support via the on-site chat or email studio.madriver@gmail.com (individual entrepreneur V. A. Kiselev, TIN 312325746625).