Plain-English summary: Rivo reads mobile money SMS messages on your agents' phones to record transactions automatically. We only read SMS from Airtel Money, MTN MoMo, and Zamtel Kwacha. We never read personal messages. Your data is only visible to you.

1. Who we are

Rivo ("we", "us", "our") is a software platform that helps Zambian mobile money agent network operators track their agents' transactions and float balances in real time. Our registered contact is hello@rivo.co.zm.

2. What data we collect

We collect two categories of data:

Account data — when you register, we collect your name, email address, and a hashed (encrypted) password.

Transaction data — when the Rivo Agent app is installed on an agent's Android phone, it reads incoming SMS messages from the following mobile money senders only:

From each qualifying SMS we extract: transaction type, amount, balance, customer phone number (partially masked), transaction reference, and timestamp. The raw SMS text is also stored so you can review it in your dashboard.

SMS messages from any other sender are ignored entirely and never transmitted to our servers.

3. Why we read SMS messages

The sole purpose of reading SMS messages is to automatically record mobile money transactions made by agents on behalf of the account holder. This replaces manual record-keeping and gives the account holder a real-time view of their float business. The app does not read, store, or transmit personal conversations or any non-mobile-money SMS.

4. How we use your data

We do not use your data for advertising, profiling, or any purpose beyond operating the Rivo service.

5. Who can see your data

Only you (the account holder) can see your agents' transaction data in the Rivo dashboard. We do not sell, rent, or share your data with any third party except as described below.

6. Third-party services

We use a small number of trusted third-party services to operate Rivo:

7. Data retention

We retain your transaction data for as long as your account is active. If you cancel your account and request deletion, we will delete your personal data and transaction records within 30 days. Some data may be retained longer where required by law (e.g. billing records).

8. Security

All data is transmitted over HTTPS (TLS 1.2+). Passwords are hashed using bcrypt and never stored in plain text. Database access is restricted to authenticated application processes only.

9. Your rights

You have the right to:

To exercise any of these rights, email us at hello@rivo.co.zm.

10. Children

Rivo is a business tool intended for adults. We do not knowingly collect data from anyone under the age of 18.

11. Changes to this policy

We may update this policy from time to time. We will notify registered users by email of any material changes. The "last updated" date at the top of this page always reflects the current version.

12. Contact

For any privacy questions or data requests, contact us at hello@rivo.co.zm.