1. Who we are
The data controller is Mr Ruben Lutz, sole trader operating under the trade name Rivolt, 60 rue François 1er, 75008 Paris, France (SIREN 991 496 464).
For any question about your data, write to contact@rivolt.ai.
2. What we process and why
Visiting this site
Our host records technical connection data (IP address, browser, pages requested) to deliver the site and keep it secure. Legal basis: our legitimate interest in running a secure site.
This site uses no audience measurement and no advertising cookies. Your language choice is stored in your own browser and is never sent to us.
Booking a call
When you book a call through Cal.com, we receive your name, your professional email address, your company and your answers to the booking questions. We use them to organise and prepare the call, and notes may be taken during it. Legal basis: steps taken at your request before a contract.
Business prospecting
If you received an email or a LinkedIn message from Rivolt, we processed the following professional data about you: name, job title, company, professional email address, public professional profile and public signals about your company (hiring, fundraising, advertising, product launches).
This data comes from public sources (company websites, public professional profiles, advertising libraries, product launch platforms) and from B2B data providers. Legal basis: our legitimate interest in offering you services related to your professional role. No decision with legal effect on you is made automatically.
You can object at any time and at no cost: reply to any of our messages, or write to contact@rivolt.ai. Your address is then placed on a suppression list and you will never be contacted again.
Clients
For our clients, we process the contact details of their representatives, contract and billing data. Legal basis: performance of the contract and our accounting obligations.
3. How long we keep it
- Prospects: three years from our last contact without a reply, then deleted.
- Objections: the email address or domain alone, kept on the suppression list for as long as needed to honour your objection.
- Call bookings: three years from our last contact.
- Clients: for the duration of the contract, then ten years for accounting records.
- Connection logs: for the period set by our host, for security purposes only.
4. Who receives it
Your data is accessible only to the Rivolt team and to the service providers we use, each acting on our instructions. We never sell or rent your data.
They fall into a few categories: hosting and databases, email and scheduling, outreach tools, B2B data providers, AI processing, internal records, and billing.
5. Transfers outside the European Union
Several of these providers are based in the United States. Transfers are governed by the EU-US Data Privacy Framework where the provider is certified, and otherwise by the European Commission's standard contractual clauses.
6. Your rights
Under the GDPR and the French Data Protection Act, you have the following rights over your data:
- Access: obtain a copy of the data we hold about you, and where it came from.
- Rectification: have inaccurate data corrected.
- Erasure: have your data deleted.
- Restriction: have the processing of your data suspended.
- Objection: refuse any business prospecting, at any time and without giving a reason.
- Portability: receive the data you gave us in a reusable format.
- Post-mortem instructions: decide what happens to your data after your death.
Write to contact@rivolt.ai. We answer within one month. If you believe your rights are not respected, you may lodge a complaint with the CNIL (www.cnil.fr).
7. Security
Access to your data is limited to the people who need it, through individual accounts. Our providers are bound by data processing agreements. No transmission over the internet is entirely secure, and we will inform you without delay of any breach likely to put your rights at risk.
8. Links to other websites
This site links to third-party websites, including the tools we work with. We have no control over their practices: read their own privacy policies when you visit them.
9. Legal disclosure
We disclose personal data to public authorities only when the law requires it, for example in response to a court order.
10. Changes
This policy may change as our services evolve. Last updated: 17/10/2026.