Last updated: 17/10/2026
This page describes the measures Rivolt applies to the data it processes, for itself and on behalf of its clients. It is the reference for article 32 of the GDPR in our data processing agreement.
Access
Only the Rivolt team has access to the data, each person through an individual account on each tool. No account is shared, and access is removed when someone leaves.
Providers
Data is stored and processed only with the providers listed on our sub-processors page, under their data protection terms. API keys are kept out of source code.
Objections
Every objection, whether a reply saying no, a request to contact@rivolt.ai or the opt-out form, is added to a suppression list that applies to every campaign. Replies are processed automatically as they arrive.
Artificial intelligence
We use AI models through their providers' business APIs, whose terms exclude training on submitted data. Client data is never used to train a model without explicit consent.
Breaches
If a breach occurs, we notify the clients concerned within 48 hours of becoming aware of it, and the CNIL within 72 hours when required by article 33 of the GDPR.
Reporting a security issue
Write to contact@rivolt.ai. We acknowledge every report.