Privacy Policy

Privacy Policy (summary)

This is a machine-assisted English summary. The Russian version of this document is the authoritative one.

Riverdell is an order-tracking service for freelancers. The operator processes personal data under Federal Law No. 152-FZ, collecting only the minimum needed to run the service: email and/or a numeric Telegram ID for sign-in (or, when you sign in with Yandex ID, the numeric Yandex account ID and email received from Yandex ID, operated by a Russian company), account data (user number, interface language, last sign-in date, consent record), the order data you enter yourself (order title and description, client name, payment form, dates, amounts, extra services, expenses, payments, attached files including closing documents), and support conversations with attachments. We do not collect your Telegram username or phone number. Your tax ID and name are stored only if you switch on «Remember my details» when creating a certificate of completion, and are erased the moment you switch it off; the client details and the signature you draw or upload are used once, to produce the document, and are never stored. A generated certificate is kept only if you attach it to the order yourself or create a share link for your client — such a link and its file live 30 days and are then deleted automatically; a client email address you type to send the document is used once and never written to the database.

Order data may contain information about third parties (your clients). By entering it you confirm you have a lawful basis to process it; for that information you act as an independent controller, and we process it on your behalf only to provide the tracking features. The service is free — we do not process or store your payment data. We do not store IP addresses: an IP is used in memory at request time for abuse protection only and is never written to the database.

Data may be shared only as needed with the hosting provider, the email provider, the payment operator, and with authorized state bodies as required by law; all of them are registered in Russia and process data inside Russia. We never sell your data. Databases are hosted on servers in Russia, and no cross-border transfer takes place: we do not send personal data to foreign persons or organisations. Notifications are delivered by email and inside the service; deadline reminders in the mobile apps are scheduled by the device itself from data already on it.

Retention limits: support attachments 90 days; support conversations 1 year after a ticket is closed; in-app notifications 180 days; administrator audit log 3 years. An account not signed into for 180 days is anonymised automatically — signing in resets that clock.

Security includes HTTPS in transit, irreversible password hashing, encrypted database backups that only the holder of the private key can decrypt, order files accessible only to their owner, and role-based access: support staff see your user number but not your contact details.

You may request access, correction or deletion of your data, withdraw your consent, and complain to the supervisory authority (Roskomnadzor) or a court. You can export your orders as an Excel file and delete your account yourself at any time from the Profile page — deletion is immediate and irreversible and removes your orders and files. For anything else, contact support via the on-site chat or email studio.madriver@gmail.com (individual entrepreneur V. A. Kiselev, TIN 312325746625).