RivenMD+ ("RivenMD+", "we", "our", or "us") operates from a principal place of business at 22818 Paradise Gate Dr, Spring, TX 77373, together with its affiliates and subsidiaries. This Privacy Policy explains how we collect, use, share, and protect your personal information when you visit our websites, including www.rivenmd.com, or otherwise interact with us (the "Website"), and the choices and rights you have.
Please read it carefully. If you are a California resident, see the California section for our notice at collection and your CCPA rights. If you reside in another U.S. state with a privacy law, see the U.S. state privacy rights section. If you are a resident of Washington or Nevada, please also review our Consumer Health Data Policy.
RivenMD+ is a technology platform and is generally not itself a HIPAA-covered entity. The independent, state-licensed clinicians and affiliated professional medical groups who treat you are responsible for information governed by HIPAA, and their own privacy notices apply to the care they provide.
1. How we collect information
How we collect information depends on how you interact with us. We collect information you provide directly, information we collect automatically as you use the Website, and information we receive from other sources.
- Directly from you, when you create an account, contact us, sign up for communications, make a purchase, or interact with us at an event.
- Automatically, through cookies and similar technologies as you use the Website, including device and usage information.
- From other sources, such as service providers, marketing partners, and data providers, which we may combine with information we already hold.
- From your telehealth provider, with your authorization, if you receive telehealth services, as described in the telehealth section below.
2. Information we collect
Depending on your interactions with us, we may collect the following categories of personal information:
- Identifiers and contact information, such as your name, postal address, email address, and phone number.
- Commercial and transaction information needed to process and fulfill an order. We do not collect or store full payment-card numbers, which you submit directly to our third-party payment processors (such as Stripe).
- Internet and network activity, such as IP address, device identifiers, browser and operating-system details, and how you interact with the Website.
- Communications and any other information you choose to provide, for example in messages you send us.
- Inferences we draw from the information above.
- Sensitive personal information, including health-related information that, with your authorization, we receive from your telehealth provider in connection with the Telehealth Platform.
3. How we use your information
We use personal information for the following purposes:
- To set up, administer, and manage our relationship with you, including newsletters, waitlists, and purchases.
- To operate, maintain, secure, analyze, and improve the Website and our services.
- To communicate with you, respond to your inquiries, and, where you have consented, send marketing communications. You can opt out of marketing at any time.
- To contact you by phone or SMS only where you have given prior express consent, including to follow up on an incomplete purchase. Reply STOP to opt out of texts.
- For security, fraud prevention, debugging, auditing, research and development, and business analysis.
- To comply with legal obligations and enforce our Terms of Service.
We do not use your personal information to make automated decisions that produce legal or similarly significant effects about you, and we do not engage in profiling for such purposes.
4. Cookies and similar technologies
The Website uses cookies and similar technologies to operate the site, remember your preferences, analyze usage, and support advertising. For details and your choices, see our Cookie Policy.
5. When we disclose your information
We disclose personal information on a need-to-know basis to the following categories of recipients:
- Our personnel and affiliates who support your relationship with us.
- Service providers and advisors that operate on our behalf under contract, such as IT, hosting, analytics, payment processing, and customer-support vendors.
- Government, law-enforcement, or regulatory authorities where required by law or lawful request.
We may de-identify and aggregate information so that it no longer identifies you and use or share it for any lawful purpose. We may also transfer personal information in connection with a merger, acquisition, financing, or sale of all or part of our business. Where we engage service providers, we put contractual protections in place to keep your information secure.
6. Legal requirements
We may preserve, access, and disclose your personal information if we reasonably believe it is necessary to comply with law or legal process (such as a court order, warrant, or subpoena), to enforce our Terms of Service, to detect or prevent fraud or security issues, to protect against harm to the rights, property, or safety of any person, or as otherwise permitted by law.
7. How long we keep your information
We keep personal information for as long as we have a legitimate business need, such as providing services to you, maintaining our relationship, complying with legal and tax obligations, resolving disputes, preventing fraud, and enforcing our agreements. When information is no longer needed, we delete it or de-identify it.
8. Data security
We maintain administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Questions about our security practices may be sent to privacy@rivenmd.com.
9. Your privacy choices and rights
You can update your account information, unsubscribe from marketing emails using the link in each message, opt out of text messages by replying STOP, and manage cookie preferences as described in our Cookie Policy. Depending on where you live, you may also have additional rights described in the sections below. To make a privacy request, email privacy@rivenmd.com.
10. California privacy rights
This section applies to California residents and serves as our notice at collection under the California Consumer Privacy Act (CCPA). In the past 12 months we may have collected the categories of personal information described in Section 2, including identifiers, commercial information, internet activity, inferences, and sensitive personal information, for the purposes described in Section 3, and disclosed them to the categories of recipients described in Section 5.
Subject to certain exceptions, California residents may request to: know and access the personal information we collect, use, and disclose; delete personal information we collected from them; correct inaccurate personal information; limit our use of sensitive personal information; and opt out of any "sale" or "sharing" of personal information. We do not sell your personal information for money, and we do not "sell" or "share" health or telehealth information. We will not discriminate against you for exercising your rights.
To exercise these rights, email privacy@rivenmd.com; we will take reasonable steps to verify your identity, and you may use an authorized agent. California residents may also make a "Shine the Light" request once per year about disclosures to third parties for their direct-marketing purposes by emailing privacy@rivenmd.com. We do not knowingly sell or share the personal information of consumers under 16.
11. U.S. state privacy rights
Depending on the U.S. state where you reside, including Texas and other states with comprehensive privacy laws, you may have the right to confirm whether we process your personal information and access it, request a copy, correct inaccuracies, request deletion, and opt out of any sale of personal information or processing for targeted advertising, subject to exceptions in applicable law.
To exercise these rights, email privacy@rivenmd.com. We will verify your request and respond as required by law. If we deny your request, you may appeal by following the instructions in our response. To opt out of cookie-based targeted advertising, set your preferences through our Cookie Settings or use a recognized opt-out preference signal such as Global Privacy Control.
12. Access from outside the United States
The Website and our services are intended for users in the United States. If you access them from outside the United States, you understand that your information will be transferred to, processed in, and stored in the United States, where data-protection laws may differ from those of your location.
13. Affiliate, creator, and referral marketing
We may operate referral, affiliate, and creator partnership programs. When you reach the Website through a referral link, promotional code, or similar technology, we and our marketing partners may use links, codes, cookies, and similar technologies to attribute the referral, measure campaign performance, administer these programs, prevent fraud, and process partner payments. We share only the limited information needed for these purposes, and partners are contractually restricted to using it only for them. See our Cookie Policy for more.
14. Use of AI and automated tools
We may use artificial intelligence, machine learning, and automated analytical tools, including enterprise AI services operated by trusted providers, to support internal operations such as analysis, product development, fraud detection, security monitoring, and customer support. Access is limited to authorized personnel, providers are bound by contractual safeguards, and we do not use these tools to make automated decisions that produce legal or similarly significant effects about you.
15. Telehealth information and use restrictions
If you receive telehealth services, certain personal and health-related information may be collected by your telehealth provider and shared with us under your authorization and applicable law. We use this information only to administer and support those services, to comply with legal obligations, or as otherwise permitted by law. Unless you authorize it or the law requires it, we do not use health or telehealth information for advertising, marketing attribution, affiliate marketing, or targeted advertising, and we do not sell or share it. We maintain safeguards designed to protect this information.
16. Do not sell or share my information
We do not sell your personal information for money, and we do not sell or share your personal information with third parties for their own marketing purposes. We never sell or share health or telehealth information. To opt out of cookie-based advertising, use our Cookie Settings or a recognized opt-out preference signal such as Global Privacy Control.
17. Changes to this Privacy Policy
We review this Privacy Policy regularly and will post any updates on this page, changing the "Last updated" date above. We encourage you to review it periodically. Your continued use of the Website after an update means you accept the revised Privacy Policy.
18. Contact us
If you have questions, concerns, or complaints about how your personal information is handled, contact us at privacy@rivenmd.com or at 22818 Paradise Gate Dr, Spring, TX 77373.