Privacy Policy
Last updated: September 2026. Your privacy and sovereign data security are central to everything we build.
1. Introduction & Scope
RIVIAL DATA SECURITY Inc. ("RIVIAL", "we", "us", or "our") provides high-assurance enterprise data protection, cloud security engineering, and zero-trust advisory services. This Privacy Policy outlines our principles regarding the collection, processing, and protection of personal data in compliance with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA/CPRA), and international privacy standards.
2. Zero-Knowledge & Data Minimization
We practice strict data minimization. We only collect business contact information explicitly provided through inquiries or client advisory engagements. We do not sell, rent, or monetize client or prospect data under any circumstances.
3. Cryptographic Protection of Client Information
All client communications, advisory disclosures, and architectural artifacts are encrypted using AES-256 and TLS 1.3 in transit and at rest. Engagement documents are protected under bilateral mutual NDAs.
4. Your Rights Under GDPR & CCPA
You possess the right to access, rectify, or request the cryptographic erasure of your personal business contact information at any time. To exercise these rights, contact our Data Protection Officer at support@rivialdatasecurity.org.