Privacy Policy
Last updated: 19 August 2026
Riviera (“Riviera,” “we,” “us”) provides an order-intake and agent-readable storefront layer that lets AI assistants request orders from independent restaurants on behalf of customers. This policy explains what data we collect, why, and how it is handled, for three groups: restaurants (“merchants”), the people who order through an AI assistant (“customers”), and visitors to this website.
Data we collect from merchants
When a restaurant is onboarded onto Riviera, we collect and store the business’s menu, prices, modifiers, delivery zones, opening hours, and the contact details needed to send order requests and notifications (name, email, and/or phone number of the person managing orders).
Data we collect from customers
When a customer places an order through an AI assistant connected to Riviera, we collect the information required to fulfil that specific order: name, delivery or collection details, contact information, and the order contents. We do not collect this information for any purpose beyond quoting, validating, submitting, and tracking that order.
Riviera does not store full payment card details. Where payment is collected before merchant acceptance, it is processed by Stripe; Riviera receives only the authorization status and amount, not the underlying card number. See our Vendors & Subprocessors page for Stripe’s role.
AI agent request data
When an AI assistant (for example, Claude) queries Riviera on a customer’s behalf — to read a menu, request a quote, check delivery eligibility, or submit an order — we log that request for debugging, fraud prevention, and service-quality purposes. Agent request logs are retained separately from customer order records and are not used to build advertising profiles.
How we use data
- To quote, validate, and submit real orders between customers and merchants.
- To notify merchants of new order requests and notify customers of order status.
- To detect and prevent fraudulent or abusive use of the ordering flow.
- To maintain and improve the reliability of the agent-readable storefront itself.
We do not sell personal data to third parties.
Data sharing
We share data only with the subprocessors necessary to operate the service (hosting, database, payment processing, and email/ notification delivery) and with the specific merchant a customer has placed an order with. See Vendors & Subprocessors for the full list.
Data retention
Order records are retained for as long as needed to resolve disputes, meet accounting obligations, and support the merchant relationship. Agent request logs are retained for a limited operational window and then deleted or aggregated.
Your rights
You can request access to, correction of, or deletion of your personal data by contacting us at privacy@riviera.app.
Changes to this policy
We’ll update the “last updated” date above when this policy changes and, for material changes, take reasonable steps to notify merchants directly.
Contact
Questions about this policy: privacy@riviera.app.