What this policy covers
This policy covers the Rivet Relay website at rivetrelay.com, the contact form on it, and the email you send to the address published on it.
It does not cover work we perform for a client. Anything we handle while building or running an automation for a business is governed by the written agreement with that business, not by this page.
Information you send us
There are two ways to reach us from this site: the contact form on the contact page, and a plain email link. Either way, you decide what we receive.
The contact form asks for:
- Your name and your email address. Both are required.
- Your company name, if you want to give one. Optional.
- A phone number, if you want to give one. Optional.
- The topic of your message, picked from a short list.
- Your message.
Please do not send sensitive information through the form or by email. That includes Social Security numbers, payment card numbers, health records, and customer lists.
What happens to a form submission
A submission is not written to a database and is not stored on this website. It becomes an email, delivered to us through an email delivery service, with the address you gave set as the reply-to so we can answer you.
Alongside your message, the form sends two small technical values that exist only to catch automated spam: a hidden field a real person never sees or fills in, and a count of how many milliseconds passed before the form was sent. Neither is part of your message, neither is passed on to us, and neither is kept.
If a submission is turned away as spam, we record only the reason and a shortened form of the network address it came from. The contents of the message are never written to a log.
Information collected automatically
Two ordinary things happen when any browser loads any website, and they happen here too. A third happens only when the contact form is used.
The first is analytics. We use Vercel Analytics to count page views and see which pages people actually read. It runs without cookies and does not follow you to other websites. What we see is aggregate: how many visits a page received, roughly where visitors came from, and which links they followed. We do not receive a name, an email address, or a profile of an individual visitor from it.
The second is server records. Our hosting provider keeps short-term technical logs so the site can be delivered and kept secure. Those logs can include an IP address, the browser and device type, the page requested, and the time of the request. They are used to operate the site and investigate abuse, not to identify you.
The third is abuse protection on the contact form. So that a single source cannot flood it, we count recent submissions against the network address they came from. That count is held as a plain number attached to the address, it expires on its own after fifteen minutes, and it never contains your name, your message, or any other field from the form.
How we use information
We use what we hold for a short list of ordinary purposes:
- Replying to you and continuing a conversation you started.
- Preparing for a consultation you asked for.
- Understanding which pages are useful so the site can be improved.
- Keeping the site available, secure, and working correctly, including stopping spam and abuse of the contact form.
- Meeting a legal or record-keeping obligation.
We do not use your information to train a public AI model, and we do not feed your email into one.
What we do not do
It is worth being specific about the things this site deliberately does not do:
- We do not sell personal information.
- We do not share personal information for targeted or cross-context behavioral advertising.
- We do not run advertising pixels, retargeting tags, or social media trackers.
- We do not build a profile of you across other websites.
- We do not add you to a marketing list because you contacted us once.
Because there is no cross-site advertising here, a browser privacy signal such as Global Privacy Control has nothing on this site to opt out of.
Who else sees it
A small number of service providers handle information on our behalf so that the site, the contact form, and our email can work. Today that means:
- Vercel, our website host, which serves the site and keeps the short-term server logs described above.
- Vercel Analytics, which counts page views without cookies.
- Resend, our email delivery service, which turns a form submission into an email and delivers it to us. Your message sits in their systems and in our mailbox on their retention terms.
- Upstash, which holds the short-lived count against a network address that keeps the form from being flooded.
They act on our instructions and are not permitted to use your information for their own purposes. We may also disclose information if the law requires it, or where it is necessary to protect our rights, our clients, or the security of the site.
How long we keep it
Email correspondence is kept while the conversation is active and for a reasonable period afterwards, as a business record of what was discussed and agreed.
A form submission becomes an email, so it is kept on the same basis as any other correspondence. It is not held anywhere else.
Analytics information is aggregated and is not tied to an individual. Server logs are short-lived and are kept for security and operational purposes only. The contact form's abuse-protection count expires by itself after fifteen minutes.
If you would like your correspondence deleted sooner, ask us and we will do it, unless we are required to keep it.
Security
The site is served over an encrypted connection and sends standard security headers. The contact form posts to this site and nowhere else, and access to the mailbox it reaches is limited to the people who need it.
The form is protected from automated abuse by a hidden field, a timing check, and a limit on how many submissions one network address can send in a short window. None of that uses a cookie, a third-party script, or a puzzle you have to solve.
No website or email system is perfectly secure, and we will not pretend otherwise. Treat email as you would a postcard handled by trusted couriers: fine for ordinary business detail, wrong for secrets.
Your choices and your rights
Depending on where you live, you may have the right to ask what personal information we hold about you, to get a copy of it, to have it corrected, to have it deleted, or to object to how we use it. Texas residents have these rights under state law, and residents of other states and countries may have similar ones.
To make a request, email us at the address below and say what you would like. We may need to ask a question or two to confirm we are dealing with the right person before we act, and we will not charge you or treat you differently for asking.
We do not sell personal information or use it for targeted advertising, so there is no opt-out to give you for either.
Children
This is a website for business owners. It is not directed at children, and we do not knowingly collect information from anyone under 13. If you believe a child has sent us information, email us and we will delete it.
Links to other sites
Where this site links somewhere else, that site has its own privacy practices and we are not responsible for them. Read their policy before giving them anything.
Changes to this policy
We will update this policy when the site changes. Anything that handles information differently — a booking tool, a chat widget, a scheduling link, a customer-record sync, or an advertising tag — would mean rewriting the sections above.
The date at the top of this page tells you when it last changed. Continuing to use the site after a change means the updated policy applies.