Privacy policy

Effective Date: 3rd August 2025


River (“Platform”) is a software-as-a-service (SaaS) platform owned and operated by Two Spoon Technologies Private Limited, a company incorporated under the Companies Act, 2013, with its registered office at 56/29, 4th Cross, Subramanyapura Main Road, Chikkalasandra, Bengaluru, Karnataka – 560061, India (“Company”, “we”, “our”, or “us”).


This Privacy Policy describes our policies and procedures on the collection, use, disclosure, and protection of personal data when you use our Platform and Services (“Services”), and informs you about your privacy rights and how the law protects you.


By accessing or using the Services, you agree to the terms of this Privacy Policy.


1. Definitions

1.1 Personal Data means any information relating to an identified or identifiable individual, including but not limited to name, email address, phone number, payment details, or online identifiers.

1.2 Usage Data means data collected automatically, such as IP address, browser type, device information, pages visited, time spent, and actions taken within the Services.

1.3 Cookies are small files stored on your device to help analyze usage and personalize experiences.

1.4 Data Controller means the entity that determines the purposes and means of processing Personal Data. For River, the Data Controller is Two Spoon Technologies Private Limited.

1.5 Data Processors means third-party vendors or service providers engaged by us to process data on our behalf.


2. Information We Collect

We may collect the following categories of information:

  • Personal Data provided by you: Name, email address, phone number, company details, billing and payment information.

  • Account Data: Login credentials, authentication tokens.

  • Usage Data: IP addresses, browser/device information, log files, API calls, and service usage analytics.

  • Cookies and Tracking Data: For session management, analytics, and personalization.

  • Communications Data: Interactions with our support, surveys, or feedback.


3. How We Use Your Information

We use collected data for the following purposes:

  • To provide and maintain our Services.

  • To process billing and payments.

  • To communicate with you regarding updates, security alerts, or support.

  • To personalize user experiences and improve our Services.

  • To monitor usage, detect fraud, and ensure security.

  • To comply with legal obligations.

  • For marketing, analytics, and remarketing (only where legally permitted and with consent if required).


4. Retention of Data

  • Personal Data will be retained for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements.

  • Usage Data may be retained for internal analysis for shorter periods, except where legally required for longer retention.


5. Transfer of Data

Your data may be transferred to and maintained on servers located outside your jurisdiction. If you are located outside India, please note that we transfer data to India and other jurisdictions where our service providers operate.

We ensure adequate safeguards, such as standard contractual clauses (SCCs) or equivalent mechanisms, are in place for international transfers.


6. Disclosure of Data

We may disclose your data:

  • Business Transactions: In connection with mergers, acquisitions, or asset sales.

  • Legal Obligations: Where required to comply with applicable law, regulations, or legal process.

  • Service Providers: To hosting, analytics, payment, or customer support providers.

  • Affiliates and Partners: With our group companies or business partners, under confidentiality obligations.


7. Security of Data

We use commercially reasonable technical, administrative, and organizational measures to protect Personal Data. However, no electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.


8. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • GDPR (EU/EEA users): Right to access, rectify, erase, restrict processing, data portability, and object to processing.

  • CCPA/CPRA (California users): Right to know, right to deletion, right to opt-out of sale/sharing of personal information, right to non-discrimination.

  • Other regions: Rights as per applicable data protection laws.

You may exercise these rights by contacting us at privacy@river.ai


9. Service Providers

We may engage third-party providers, including but not limited to:

  • Hosting & Infrastructure: AWS / GCP / .

  • Analytics: Google Analytics, Segment, Mixpanel.

  • Payments: Razorpay, PayPal (all PCI-DSS compliant).

  • Customer Support: Intercom

  • Marketing & Remarketing: Google Ads, Meta Ads, LinkedIn Ads.

These providers are contractually bound to handle Personal Data only as instructed by us.


10. Cookies & Tracking

We use cookies and similar technologies for:

  • Session management.

  • Analytics and performance tracking.

  • Personalization.

  • Marketing/retargeting.

You may disable cookies in your browser, but this may affect Service functionality.


11. Payments

We use third-party payment processors such as Razorpay, and/or PayPal. We do not store card details; such data is handled securely in compliance with PCI-DSS standards.


12. Children’s Privacy

Our Services are not directed to individuals under the age of 16. We do not knowingly collect Personal Data from children. If we become aware that we have collected such data, we will take steps to delete it.


13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with the “Effective Date” updated. Continued use of the Services constitutes acceptance of the updated policy.


14. Contact Us

If you have any questions about this Privacy Policy, please contact:

Two Spoon Technologies Private Limited
56/29, 4th Cross, Subramanyapura Main Road,
Chikkalasandra, Bengaluru, Karnataka – 560061, India

📧 Email: privacy@river.ai
📞 Phone: +91 8722110229


Grievance Officer (India):
As required under the Information Technology Act, 2000 and applicable rules, the Grievance Officer is:

  • Name: Santosh Bishnoi

  • Email: privacy@river.ai

  • Address: Two Spoon Technologies Private Limited
    56/29, 4th Cross, Subramanyapura Main Road,
    Chikkalasandra, Bengaluru, Karnataka – 560061, India