Data Controller
Rinoova S.r.l. — Via Jacopo della Quercia 32, 00155 Rome (RM), Italy — VAT IT18432621003 — [email protected]
Data We Collect
- Account data: name, email address, and password (hashed).
- Usage data: API calls, server configurations, and deployment logs.
- Content data: OpenAPI specifications, MCP server definitions, and documents (PDF, DOCX, TXT, MD) you upload to your agents' knowledge base.
Documental Knowledge Base (AI Agents)
If you upload documents to an agent's knowledge base, we process their content so the agent can answer based on that information:
- Files are stored encrypted on Google Cloud Storage within the European Union (Milan region).
- Document text is processed by Google Vertex AI (EU) to generate vector representations (embeddings) used for semantic search.
- During conversations, the relevant document excerpts are sent to the LLM provider configured for the agent (e.g. OpenAI, Anthropic, Google, or the Rinoova AI gateway via OpenRouter) to generate the answer.
- You are responsible for the documents you upload: you must hold the rights and a legal basis for them. You can delete them at any time, and the related content and search indexes are removed.
Purpose of Processing
We process your data to:
- Provide and operate the Rivinci MCP Tool service.
- Send transactional emails (account verification, billing).
- Monitor platform health and prevent abuse.
- Comply with legal obligations (EU VAT Directive 2006/112/EC, GDPR).
Data Retention
We retain your data as follows:
- Free plan: account data retained for 12 months after last login.
- Paid plans: data retained for 30 days after subscription termination, then deleted.
International Transfers
Your data is processed within the EU/EEA. Where third-party processors outside the EU are used (e.g., Google Cloud), Standard Contractual Clauses (SCCs) are in place per GDPR Art. 46.
Your Rights (GDPR)
Under GDPR you have the right to:
- Access and receive a copy of your personal data (Art. 15).
- Rectify inaccurate data (Art. 16).
- Request erasure of your data (Art. 17). Contact: [email protected]
Contact
For any privacy-related request, contact our Data Protection Officer at [email protected].