RAiN — Rivium AI Network

Privacy Policy

Effective date: 22 June 2026

This Privacy Policy explains how Rivium Analytics Ltd ("Rivium Analytics", "we", "us", or "our") collects, uses, shares, and protects personal information when you use RAiN (Rivium AI Network) (the "Platform"), our website, and related services. We are committed to handling your data in line with the Nigeria Data Protection Act, 2023 (NDPA), the Nigeria Data Protection Regulation (NDPR), and — where applicable — the EU General Data Protection Regulation (GDPR).

By using the Platform you agree to the practices described here. If you do not agree, please do not use the Platform.

1. Who we are

RAiN (Rivium AI Network) is owned and operated by Rivium Analytics Ltd, headquartered in Abuja, FCT, Nigeria, with offices in Uyo (Akwa Ibom State) and Lagos, Nigeria. For privacy matters you can reach us at support@rain.com.ng or by opening a ticket at https://docs.riviumanalytics.com/portal/tickets/new.

For the purposes of data protection law, Rivium Analytics is the data controller of the personal data we hold about you — your account, profile, projects, payments and use of the Platform.

RAiN AI Studio is different, and the difference matters. When you build an agent and point it at data of your own or a client's — a mailbox, a spreadsheet, a customer conversation — you decide what is processed and why. For that data you are the controller and Rivium Analytics is a processor, handling it only to run the agent you configured and on your instructions. If you are building for a client, that client is usually the controller and you the processor; you should have your own written arrangement with them covering it. A data processing agreement with us is available on request at support@rain.com.ng.

2. Information we collect

We collect the following categories of information:

  • Account & identity data — name, email address, phone number, WhatsApp number, password (stored only as a secure hash), and your role (business, expert, reviewer, editor, or admin).
  • Profile & onboarding data — answers you provide during onboarding, such as your business details, services, industries, tools, skills, availability, capacity, location, and budget or urgency indicators.
  • Project & engagement data — match requests, projects, milestones, checklists, uploaded evidence (e.g. screenshots, configuration summaries, test results, handover documents), QA reviews, and related communications.
  • Payment & financial data — your project payment records and statuses, expert payout records and statuses, platform fee and reconciliation metadata, subscription plan and status, job-response credit balance, and — for experts — bank account details for payouts. Card details are entered on and stored by our payment provider (Paystack); we keep only non-sensitive references and a masked summary (e.g. card brand and last four digits, a bank account's bank and last four digits). We do not store full card numbers or bank account numbers.
  • Usage & device data — log data, IP address, browser type, pages visited, and interactions with the Platform, including the Rain assistant.
  • Voice data — if you use the voice features of the Rain assistant, audio you record is processed to transcribe your request and generate a spoken reply.
  • RAiN AI Studio content — the agents you design and their instructions; the knowledge you type and the documents you upload to ground them; the runs your agents perform, including the traces (each step taken) and the results produced; conversations your agents hold, such as WhatsApp threads; and content an agent reads from or writes to an account you connected. Where that content contains other people's personal data, see section 1 — for it you are the controller and we are your processor.
  • Model provider keys — if you connect your own AI provider, the API key is stored encrypted, is never displayed again, and is decrypted only at the moment a design or a run needs it.
  • Cookies & similar technologies — see our Cookie Policy.

We collect this information directly from you, automatically as you use the Platform, and from service providers acting on our behalf.

3. How we use your information

We process your personal data to:

  • create and manage your account and authenticate sign-in;
  • match businesses with verified experts and coordinate projects;
  • operate, maintain, secure, and improve the Platform;
  • operate RAiN AI Studio — design agents when you ask, run them when you or a schedule or an incoming message triggers them, and keep the traces and results so you can inspect what happened;
  • apply and enforce usage limits, and detect abuse;
  • run quality assurance (QA) reviews and enforce our standards;
  • provide the Rain assistant and respond to your questions;
  • communicate with you about your account, projects, and support requests;
  • comply with legal obligations and enforce our terms.

4. Legal bases for processing

Where the NDPA/GDPR applies, we rely on one or more of the following legal bases: performance of a contract (to provide the Platform and projects you request), consent (e.g. certain cookies and optional communications), legitimate interests (to secure and improve the Platform), and legal obligation (to comply with applicable law). You may withdraw consent at any time where consent is the basis for processing.

5. How we share information

We do not sell your personal data. We share it only:

  • Between matched parties — to enable a project, relevant details are shared between a business and the expert matched to it.
  • With service providers — hosting, email delivery, file storage, speech (transcription/synthesis), and analytics partners who process data on our instructions under appropriate safeguards.
  • With integration providers — when you connect a third-party account (for example Gmail, Slack, or Google Sheets) to RAiN AI Studio, the authorisation that lets us act on that account is created and stored by an integration provider acting on our instructions. We do not receive or store your password for those services. See the Integrations & Connected Accounts notice for what this means in practice.
  • With AI model providers — content an agent reads or writes while performing a task you configured is sent to the model provider selected for that project in order to produce the result. The same applies when you use Build with AI to design a project: your prompt is sent to a model to draft the agents. Where you have connected your own provider key, that provider is yours and its own terms and privacy policy govern what it does with the content.
  • With our payment provider — we use Paystack to collect project payments to RAiN through hosted checkout and to pay expert payouts to their banks via transfers. Your card and bank details are provided to and processed by Paystack under their own terms and privacy policy.
  • For legal reasons — where required by law, regulation, legal process, or to protect the rights, property, or safety of Rivium Analytics, our users, or the public.
  • In a business transfer — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

Our public experts directory is PII-free and never exposes contact details.

6. International transfers

Some of our service providers may process data outside Nigeria. Where we transfer personal data internationally, we take steps to ensure an adequate level of protection through appropriate safeguards consistent with the NDPA and applicable law.

7. Data retention

We retain personal data for as long as your account is active and as needed to provide the Platform, then for the period required to meet legal, accounting, or reporting obligations. When no longer required, we delete or anonymise it.

Studio content follows you. Agents, knowledge, uploaded documents, run traces and results are kept while the project exists, so that you can inspect what your agents did. Delete a project, a document or a connection and the associated content is removed. Practice workspaces used for Academy learning may be reset. Where you are the controller (section 1) and need content erased on a client's behalf, ask us at support@rain.com.ng.

8. Your rights

Subject to applicable law, you have the right to access, correct, update, or delete your personal data; to object to or restrict certain processing; to data portability; and to withdraw consent. To exercise these rights, contact us at support@rain.com.ng. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

9. Security

We use technical and organisational measures — including encryption in transit, hashed passwords, access controls, audit logging, and encryption at rest for the provider keys and connection credentials you entrust to us — to protect your data. No method of transmission or storage is completely secure, but we work to protect your information and to notify you and the relevant authority of any breach as required by law.

10. Children

The Platform is not directed to children under 18, and we do not knowingly collect their personal data.

11. Changes to this Policy

We may update this Policy from time to time. We will post the updated version here and revise the effective date above. Material changes may be communicated to you directly.

12. Contact us

Questions about this Policy or your data? Email support@rain.com.ng or open a ticket at https://docs.riviumanalytics.com/portal/tickets/new.

Last updated September 30, 2026.