Privacy Policy

Last updated 29 August 2026

rivit (rivit.app) is a bill-processing service for building and trades businesses, operated from Sydney, Australia. This policy explains, in plain language, what information we collect and what we do with it. We handle personal information in line with the Australian Privacy Act 1988 and the Australian Privacy Principles.

What we collect

• Account details — your name, email address, and company name, provided when you sign up or accept an invite (including via Google sign-in, which shares your name and email with us).
• Bills and documents — the supplier invoices, receipts, and related files you upload or email to your rivit address, and the data extracted from them (supplier names, amounts, dates, line items).
• Accounting data — when you connect Xero or JobTread, we access the data needed to code and create bills: your chart of accounts, tracking categories, contacts, jobs, and cost codes. We only read and write what the service needs to do its job.
• Usage basics — standard technical logs (times, errors) needed to run and support the service.

How we use it

• To provide the service: extracting bill data, suggesting coding, and creating records in your connected accounting systems — always after your approval.
• Document contents are processed by an AI service (Anthropic's Claude) solely to extract the bill's details. Your documents are not used to train AI models.
• We do not sell your data, and we do not share it with anyone except the service providers below.

Where it lives

• Your data is hosted in Sydney, Australia (DigitalOcean and Supabase data centres), encrypted in transit, with automated backups.
• Each company's data is isolated — enforced by the database itself, not just application code.
• Service providers we rely on: DigitalOcean and Supabase (hosting), Anthropic (document extraction), Postmark (email delivery and receiving), Google (sign-in), and Xero / JobTread (the systems you choose to connect).

Your choices

• You can disconnect Xero or JobTread at any time — from rivit, or by revoking access from within those products.
• You can ask us to correct or delete your account and its data by emailing us; we'll act on it promptly.
• We use only essential cookies — a single session cookie that keeps you logged in. No advertising or tracking cookies.

Contact

Questions or requests about your data: steve@tommico.com.au.

If we change this policy, we'll update this page and the date above.