Privacy Policy

When a customer completes a RUVO portal, they may submit:

• Full legal name, date of birth, and contact information
• Government-issued identification (driver's license number and state)
• Social Security Number (SSN)
• Current address
• Employment information and monthly income
• Trade-in vehicle details
• Vehicle preferences and budget range
• Credit pre-qualification consent and financial information
• Uploaded documents (driver's license images, insurance cards, pay stubs)

Customers submit this information voluntarily at the direction of the dealership. RUVO collects it solely to make it available to the dealership through the dashboard.

When dealership staff use the RUVO platform, we collect:

• Name, email address, and role
• Login timestamps and session data
• IP addresses associated with record access and login events
• Actions taken within the platform (record views, SSN reveals, exports, status changes)

This data is collected as part of normal platform operation and is used to maintain security, enforce role-based access, and generate audit logs.

We do not use third-party analytics, tracking pixels, or advertising cookies on our marketing website. We do not collect personally identifiable information from visitors unless they contact us directly by email.

Our hosting provider (Vercel) may collect standard server logs including IP addresses and request metadata as part of normal infrastructure operation. We do not control or access these logs for marketing purposes.

• Make it available to the dealership that collected it
• Enable document review and export to dealership management systems
• Generate AI-assisted summaries through Ruvi (our built-in AI assistant)
• Maintain audit records of who accessed which records and when

• Authenticate users and maintain session security
• Enforce role-based access controls
• Generate and maintain audit logs
• Send platform notifications (new submissions, mentions, alerts)
• Investigate security incidents

All data is encrypted at rest using AES-256 encryption. Data in transit is protected by TLS 1.3. SSNs and driver's license numbers are double-encrypted, encrypted once at the database layer and a second time with a separate key stored outside the database.

Role-based access controls are enforced server-side. Salespeople cannot access SSNs or full financial data. Every access to sensitive records is logged with the user's identity, timestamp, and IP address.

RUVO's built-in AI assistant (Ruvi) operates under a Zero Data Retention agreement with Anthropic, our AI vendor. Customer data submitted to Ruvi for processing is not stored by Anthropic and is not used to train AI models. This is contractually enforced, not a configurable setting.

Uploaded documents are stored in encrypted cloud storage. Document access URLs expire after 60 seconds and cannot be bookmarked, shared, or reused.

If you are a customer who submitted information through a RUVO portal and wish to request deletion of your data before the 90-day automatic deletion window, you may contact us at hello@goruvo.com. We will process verified deletion requests within 30 days and confirm completion.

Dealerships may export customer data at any time using RUVO's built-in export tools (CDK template, Reynolds template, or custom export). Upon cancellation of a RUVO subscription, dealerships may request a full data export within 30 days of their cancellation date. We will provide a complete export of all customer records in CSV format within 30 days of the request. After the export window closes, data is deleted per our standard retention schedule.