Privacy Policy
Last updated: November 3, 2026
This policy explains how UNRIVO TECHNOLOGY LLC ("UNRIVO", "we"), a Michigan limited liability company, 17203 Syracuse, Hamtramck, MI 48212, United States, collects, uses and protects your data when you use unrivo.com and app.unrivo.com.
Data we collect
- Account data: your name and email from your Google account when you sign in.
- Business data: what you enter in your business profile (name, type, services, markets, goals, website, social handles, phone).
- Stories and content: the stories you write, your corrections, and the posts we generate or you edit.
- Media: photos and videos you upload, stored in private storage only you can access, and deleted 60 days after upload or publishing.
- Instagram connection: when you connect Instagram we store your account ID, username, account type and an access token, encrypted, used only to publish posts you schedule.
- Meta Ads connection (optional): when you connect Meta Ads we store your ad account IDs, names and currency and an encrypted access token, used only to create, launch, pause and report on the campaigns you approve.
- Facebook Pages connection: when you connect Facebook we store the ID and name of each Page you choose and its Page access token, encrypted, used only to publish posts you schedule on that Page.
- Usage data: technical logs and the AI usage cost of each request.
- Feedback: ratings and comments you choose to send us.
How we use your data
- To provide the service: understanding your story, generating content, and publishing to Instagram and Facebook only the posts you approve and schedule.
- To improve the quality of the service and protect it from abuse.
- We never sell your data, and we never publish anything to your account without your approval.
Service providers
We rely on trusted providers to run UNRIVO: Supabase (database, sign-in, storage), Cloudflare (hosting and security), Anthropic (AI text processing), Meta — Instagram and Facebook (publishing), Google (sign-in), Stripe (subscription payments — card details go directly to Stripe) and Resend (service emails). They process data only as needed to provide their services.
Customer messages (Inbox). When you connect an Instagram account, a Facebook Page or a WhatsApp Business number and turn on messages, UNRIVO receives the messages your customers send to it through Meta and stores them with the customer's public name, username or WhatsApp phone number, and profile photo where available, so you can read and answer them. If you keep using the WhatsApp Business app on the same number, UNRIVO also imports your WhatsApp contacts and up to 6 months of your one-to-one chats, and shows the messages you send from your phone. Replies are sent when you press Send, or automatically only if you choose the automatic reply assistant in Automation, always within Meta's messaging rules (inside the 24-hour customer service window). AI suggestions, automatic replies and conversation analysis are processed by Anthropic using the recent messages of that conversation and your business profile and knowledge. Messages are deleted when you disconnect that account or delete your UNRIVO account.
CRM. Contact details you add or confirm in the CRM (name, email, phone, notes, tags, leads and deal values) are private to your account, used only to run your business in UNRIVO, never used for another business, and never sent to Meta or anyone else by UNRIVO. AI suggestions from a conversation are saved only when you apply them. You can export your contacts at any time.
Ratings. Ratings you send from inside UNRIVO are private and used to improve the service. A rating is shown on unrivo.com only if you tick "Show my rating and comment on unrivo.com" and UNRIVO approves it — with the name you typed, never your email. To remove a shown rating, email us.
Retention and deletion
We keep your data while your account is active. You can disconnect Instagram or a Facebook Page at any time from the Accounts page in the app; its access token is deleted immediately. To delete your account and all your data, see Data Deletion.
Security
We use encrypted connections (HTTPS), encrypted access tokens, and per-user data isolation at the database level.