This policy explains what personal data Rivert handles, why, and what rights you have over it. It applies to this website (rivertapp.com) and to the Rivert application (app.rivertapp.com).
It is written to meet Cameroon's Law No. 2024/017 of 23 December 2024 on the protection of personal data, Law No. 2010/012 of 21 December 2010 on cybersecurity and cybercrime, and the CEMAC rules on the protection of users of electronic communications services.
Who we are
Rivert is published by Rivert Consulting, a [to be completed] with a share capital of [to be completed], registered in the Trade and Personal Property Credit Register (RCCM) under number [to be completed], taxpayer number (NIU) [to be completed], whose registered office is at [to be completed].
For any question about your data, write to [email protected].
Two different roles
Rivert handles personal data in two capacities, and the rules differ for each.
- As a processor for our customers. When an employer uses Rivert to run payroll, it enters data about its employees: identity, contracts, salaries, CNPS and tax numbers, leave, reviews. The employer decides what is entered and why. It is the data controller, and we process that data only on its instructions and to provide the service. If you are an employee and want to exercise your rights over this data, contact your employer first. We will help it answer you.
- As a controller for our own purposes. We decide how we use the data of the people who visit this website, write to us, or hold a Rivert account (for example an administrator's name, email address and sign-in history).
What we collect
- Account data: name, professional email address, language, role in the organization, and the information needed to secure sign-in, such as password hashes and two-factor authentication settings.
- Organization data: company name, address, CNPS and tax identifiers, and the settings needed to calculate payroll.
- Employee data, on behalf of the employer: identity, contact details, contracts, salary components, payroll results, CNPS and tax declarations, leave and performance reviews.
- Messages you send us, through the contact form or by email: your name, email address, company and the content of your message.
- Technical data: IP addresses and security logs needed to protect the service against abuse, and a record of actions taken in the application (the audit log).
This website sets no cookies and uses no advertising tools. To count its visits, it uses Cloudflare Web Analytics, which sets no cookie and does not follow you from one site to another: it records the page viewed, the referring site, the type of browser and device, and the country, and keeps no profile of you.
Why we use it
- To provide the service: calculate payroll, produce payslips and declarations, and manage employee records, as the contract with our customer requires.
- To secure accounts and the service, detect abuse and keep an audit trail, which is our legitimate interest and, for payroll, a legal obligation of our customers.
- To answer your messages and support requests.
- To meet our own legal obligations, such as accounting and tax.
We do not sell personal data, and we do not use employee data for any purpose of our own.
Who receives it
- Within a customer organization, only the users that organization authorizes, according to the roles it assigns.
- Our technical providers, who host and store the data on our behalf, including Cloudflare for network protection, file storage and visit counts, Resend for sending emails, and the provider that relays the contact form (FormSubmit). They act on our instructions and may not use the data for anything else.
- Public authorities, when the law requires it.
Some of these providers may store data outside Cameroon. Where that happens, we choose providers that offer an adequate level of protection and bind them by contract to protect the data.
How long we keep it
- Employee and payroll data: for as long as the customer's account is active, then for the period the customer's legal record-keeping obligations require, after which it is deleted.
- Account data: for as long as the account exists.
- Contact messages: for as long as needed to answer them, and at most one year.
- Security logs: for as long as needed to protect the service.
How we protect it
Each organization's data is kept apart by the database itself, not only by the application. Finalized payroll cannot be modified, every payroll action is recorded, administrators sign in with a second factor, and accounts are locked after repeated failed sign-in attempts. Data is encrypted in transit.
Your rights
You have the right to be informed, to access your data, to have it corrected or deleted, to object to its processing on legitimate grounds, and to the portability of the data you provided. To exercise these rights, write to [email protected]. We will answer within the time the law sets.
If you believe your rights have not been respected, you may also complain to the authority responsible for personal data protection in Cameroon.
Changes
We may update this policy. The date at the top of the page shows when it last changed, and we will tell customers of any significant change before it takes effect.