Privacy policy

Version of 14 October 2026

In short: we receive only what you send us yourself and use it to reply and deliver the project. We measure visits only with your consent — until you press “Accept” in the banner the site sets no cookies at all. We never sell data. Details below.

Who processes the data

RIVENO Studio is a web studio from Dnipro, Ukraine, that builds custom websites, CRM and ERP systems. For any question about your data, email rivenocontact@gmail.com or message @Riveno_bot on Telegram.

What data we receive

• From the request form: your name, phone or email and what you need — these fields are required; optionally, an approximate budget, your company or website and a description of the task.
• Automatically with the request: the address of the page it was sent from and the site language, so we understand what caught your interest.
• If you write to us directly by email or on Telegram — whatever you include in the message and your profile name.
• Technical data: your IP address and browser details end up in the hosting provider’s service logs. The IP address is also used to limit requests from one address (no more than five in 10 minutes): it is held only in the server function’s memory and is never written anywhere.

The cost calculator works entirely in your browser and sends nothing until you submit a request yourself.

Why we use it

• to reply to your request, clarify the task and prepare an estimate and proposal;
• to agree on and deliver the project if you decide to work with us;
• to protect the form from spam and abuse.

We send no mailings without your separate consent, never sell data or share it for advertising, and make no automated decisions about you.

Legal basis

By sending a request or message you consent to the processing of that data so we can reply. If we agree to work together, the data is processed to prepare and perform the contract. Limiting requests by IP address is our legitimate interest in keeping the site secure. You can withdraw consent at any time by writing to us.

Who else processes the data

We rely on services without which the site and communication would not work. They process data on our behalf:

• Vercel (USA) — website hosting and the server function that receives requests;
• Telegram — delivers the request to the studio’s work chat;
• Resend (USA) — sends a copy of the request to the studio mailbox;
• Google — the studio mailbox runs on Gmail, and Google Analytics counts visits if you agreed to it;

Some of these services are located outside Ukraine, including in the USA, so data may be processed there. Each service has its own privacy policy. Data may be disclosed to public authorities only where the law expressly requires it.

Links to Instagram, Telegram and client websites in our portfolio lead to third-party resources with their own rules.

Cookies and browser storage

Until you give consent the site sets no cookies and loads nothing from third-party servers: fonts, scripts, images and videos are served by the site itself. On your first visit a banner appears at the bottom with two buttons — “Accept” and “Decline”.

• “Decline” — nothing is switched on. The site works exactly the same, we simply do not count you;
• “Accept” — Google Analytics 4 loads and sets its cookies (_ga, _ga_*) for up to two years. They are what tells a returning visit from a new one;
• your decision is kept in the browser’s localStorage and holds until you change it. To change or withdraw it, use “Cookie settings” in the footer of any page. After a refusal the _ga cookies already set are deleted;
• Google’s advertising features are switched off: the site passes no data for advertising and builds no ad profiles (ad_storage, ad_user_data, ad_personalization are denied).

What we actually see: how many people came, from which pages and sources, country and device type, which pages they viewed and whether they tapped a contact or sent a request. This statistic contains no name, phone or email — those reach us only through a request. Google Analytics data is processed on Google servers, including outside Ukraine.

For the page transition animation the site may write a technical flag with no personal data to your browser’s sessionStorage; it disappears as soon as you close the tab.

How long we keep data

• a request that did not turn into a project — up to 12 months after our last contact;
• correspondence and project data — for the duration of our work together and 3 years afterwards, in case of warranty questions or claims;
• hosting service logs — for the short period set by the hosting provider.

After that, the data is deleted.

How we protect data

The site works over HTTPS only and has a strict Content Security Policy that blocks third-party scripts. Access keys to services are kept on the server and never reach the browser. Only the studio team sees requests.

Your rights

You can:

• find out whether we process your data and get a copy of it;
• correct inaccurate or outdated data;
• have your data deleted;
• withdraw consent or object to processing;
• receive your data in a machine-readable format.

Email rivenocontact@gmail.com and we will reply within 30 days. If you believe your rights have been violated, you can complain to the Ukrainian Parliament Commissioner for Human Rights or, if you are in the European Union, to the data protection authority of your country.

Other provisions

The site is aimed at business clients, and we do not knowingly collect data from children. Data is processed in accordance with the Law of Ukraine “On Personal Data Protection” and, for visitors from the European Union, also the General Data Protection Regulation (GDPR). If this policy changes, the updated version will appear on this page with a new date.