What we collect, what we share, and how to reach us.

When you submit a pre-qualification through Rivven, we collect the application fields you provide — name, contact details, income, employment, and the loan amount and term you request. We also collect the soft-credit data the partner bureau returns to us in response to your pre-qualification, and limited device and visitor log entries (IP address, user agent, referrer, and timestamps) needed to operate the service, prevent fraud, and produce the audit trail the federal regimes we operate under require.

If you create a Rivven account, we store authentication credentials, your email address, and the preferences you set in your profile. If you accept a partner-bank offer through Rivven, the partner bank is the data controller for the resulting loan record; Rivven keeps only the matching record, the audit trail, and any communications between you and the partner.

By submitting a pre-qualification, you authorize Rivven to obtain a soft-credit report from a partner consumer reporting agency and to use that report solely to evaluate your eligibility against each partner bank’s product rules. A soft pull is not visible to lenders beyond Rivven and does not affect your credit score.

A hard credit pull is performed only by the partner bank that originates the loan you accept, and only after you provide affirmative, separate consent on that bank’s acceptance page. Rivven never performs a hard pull and never stores a hard-pull inquiry on its own systems.

Rivven shares a pre-qualified application with a partner bank only when the partner’s product rules indicate that bank may have an offer for your file. The fields shared typically include the identification, income, employment, and loan-request fields from your application; the soft-pull summary returned by the bureau; your stated preferences; and the Rivven matchmaking metadata (reason for routing, comparable-offer count, suitability flags).

Before each bureau or partner-bank disclosure, Rivven records a permissible-purpose certification under the Fair Credit Reporting Act. We do not sell your application to a lead aggregator, and we do not publish a public list of the offers returned to you. Each partner is bound by a written agreement that limits further use of the data we transmit to permissible-purpose credit underwriting.

When Rivven acts as a user of a consumer report (the soft-pull described above), the FCRA requires us to certify a permissible purpose for each request. Rivven certifies that purpose — your credit application — on every disclosure to the bureau, and we retain the certification alongside the request log.

If Rivven ever furnishes information about you to a consumer reporting agency (for example, a status update about a funded loan), you have the right to dispute the accuracy or completeness of that information. The fastest way to start a dispute is to email the Rivven compliance team at rivven-2@polsia.app with the word “Dispute” in the subject line and a description of the item you believe is inaccurate.

You may also dispute information directly with the nationwide consumer reporting agencies — the bureaus Rivven works with include Equifax (P.O. Box 740256, Atlanta, GA 30374), Experian (P.O. Box 4500, Allen, TX 75013), and TransUnion (P.O. Box 2000, Chester, PA 19016). You may also file a complaint with the Consumer Financial Protection Bureau at consumerfinance.gov and with the Federal Trade Commission at reportfraud.ftc.gov.

Rivven will acknowledge a written dispute within ten business days of receipt and will complete its investigation within thirty days, in line with the federal timelines that apply to consumer-report disputes. If we need additional time we will tell you why and when you can expect a final response.

Mail should go to Rivven, c/o Compliance, at the address listed in the footer of your most recent partner-bank disclosure packet. Email should go to rivven-2@polsia.app. Please include your name, the loan or pre-qualification reference number, and a clear description of the issue. Rivven will not retaliate against you for filing a dispute.

Rivven retains application, audit, and consent records for the period required by the federal regimes under which the loan was originated, and no longer than is reasonably necessary to defend itself against regulatory inquiry, consumer dispute, or civil claim. We encrypt data in transit (TLS 1.2 or higher) and at rest, restrict access by role, and log every internal access event.

No security control is perfect. If we become aware of a breach affecting your personal information, we will notify you and the relevant regulator consistent with applicable state and federal breach-notification law.

Rivven is intended for adults (18+) who are U.S. residents and who are seeking a personal-loan product listed on the marketplace. We do not knowingly collect information from anyone under 18, and we do not direct the service to residents of jurisdictions where personal-loan marketplaces of this kind are prohibited.

We may update this Privacy Policy from time to time. When we make a material change, we will post the updated policy at this URL with a new effective date; where appropriate, we will also notify signed-in users by email. Continued use of Rivven after the effective date constitutes acceptance of the updated policy.

Rivven can be reached by email at rivven-2@polsia.app. We do not list a postal mailing address on this site yet; until we publish one, please direct any correspondence that requires paper delivery to the email above and we will reply with a current mailing address within five business days.