Privacy Policy

1. What This Policy Covers

This policy explains how Riva Lending (legal entity: [LEGAL ENTITY NAME]) ("we", "us") handles personal information collected through rivalending.com — this website. It covers what the site collects, why, who we share it with, and the choices you have.

It does not cover information you give us in the course of an actual loan or investment transaction after you become a borrower or investor. That is handled under the agreements and notices you receive in that process, which may include a separate financial privacy notice. It also does not cover the practices of any third-party site we link to.

Using this site means you accept this policy and our Terms & Conditions.

2. Information We Collect

We collect two kinds of information: what you choose to give us, and what is recorded automatically as you browse.

Information You Give Us

The inquiry forms on this site — on the home page, the contact page, the invest page, and the fund page — ask for some or all of the following, depending on which one you use and what you tell us you are interested in:

• Identifiers and contact details — your name, email address, and phone number (the phone number is optional).
• What you are interested in — borrowing (rental or bridge), investing (notes or the fund), or a general question.
• About the deal, if you are borrowing — the property location (town and state), the loan amount band you need, and your target closing timeline.
• About your allocation, if you are investing — the amount band you are considering, how you would hold it (personally, an LLC or trust, or a self-directed IRA / Solo 401(k)), whether you are an accredited investor, and an estimated net worth band. Every one of these has a "prefer not to say" or "prefer to discuss on a call" option.
• Your message — whatever you choose to write in the free-text box.

The accreditation and net-worth answers are self-reported ranges you select from a menu. They are not verified through this website, and we do not ask for documentation here. Where accreditation matters — for fund subscriptions — it is verified separately, before a subscription is accepted, outside this site.

Information From Contacting Us Directly

If you call us, email us, or reply to us, we keep a record of that correspondence — what was discussed and what we agreed — so we can pick up where we left off.

3. What This Site Does Not Collect

We want to be precise about this, because lending sites often are not.

This website has no field anywhere that asks for a Social Security number, a date of birth, a bank account or routing number, a payment card number, or credit report or credit score data. We do not run a credit check when you use this site — as the contact form says, there is no credit pull to get a number. We do not ask you to upload documents here, and there is no account to create, so there is no username or password.

If a transaction progresses to the point where that kind of information is genuinely needed, we will collect it later through a channel appropriate for it — not through a web form — and we will tell you what we need and why.

Please do not send sensitive details like these through the site forms or by plain email anyway. Neither is a secure channel.

4. How Our Forms Actually Work

When you press send, the site passes what you typed to a small program on our website host. That program formats it as an email and hands it to our transactional email service, Resend, which delivers it to our business inbox. The address you entered is set as the reply-to on that email, so that when we answer, our reply goes to you.

Three consequences worth knowing:

• There is no database behind the forms. The relay program keeps no copy once the email has been handed off, and nothing is stored on the website itself. If you leave the page without pressing send, we never receive anything.
• The message travels through our website host and through Resend, and is subject to their handling and retention. Resend keeps a delivery log of the emails it sends on our behalf, as any email provider does.
• Once it arrives, it sits in our business email as ordinary correspondence.

To limit automated spam, the relay program looks at the IP address a submission comes from and briefly counts how many messages it has sent recently. That count is held in memory only and is not stored or linked to your message.

Separately from the message itself, our analytics record that a submission happened — see section 5.

5. Information Collected Automatically

Like most websites, this one records some technical information as you browse, through Google Analytics 4:

• Device and connection data — IP address (which Google truncates/anonymises for GA4), browser type and version, operating system, device type, and screen size.
• Usage data — pages viewed, when, how long you stayed, the order you moved through, the referring site or search that brought you, and approximate location derived from IP (typically city or region level, not a precise location).
• Specific interactions we ask analytics to record — clicks on a phone number, clicks on an email address, clicks on the main call-to-action buttons, when you start filling in a form, when a submission fails validation, when a submission succeeds (recorded together with which interest category you picked — for example "Borrowing — rental loan (DSCR)" — but not your name, email, phone, or message), and which sections of a long page you scrolled far enough to see.

We use this to understand what is useful on the site and what is not. We do not try to identify you personally from it.

Loading our pages also requests fonts from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). That request discloses your IP address and basic browser information to Google, as any request to a third-party server does.

6. Cookies And Analytics

This site sets no cookies of its own, and it stores nothing in your browser's local or session storage. The only cookies are those set by Google Analytics 4 to distinguish visitors and sessions and to measure how the site is used.

We do not run advertising pixels, retargeting tags, social media trackers, chat widgets, or third-party embeds on this site. There is no cookie consent banner because there is nothing else to consent to; if that changes, this policy and the site will change with it.

Managing it:

• Browser controls — every major browser lets you block or delete cookies, in its privacy or site-data settings. Blocking them will not break this site.
• Google Analytics opt-out — Google publishes a browser add-on that stops Google Analytics collecting data from your browsing, at tools.google.com/dlpage/gaoptout.
• Do Not Track and Global Privacy Control — browsers send these signals inconsistently and there is no common standard for honouring DNT, so we do not currently respond to it. We will honour a recognised opt-out preference signal such as Global Privacy Control where the law requires us to.

7. How We Use Information

We use what we collect to:

• respond to your inquiry, answer your question, and get you the quote or materials you asked for;
• evaluate your financing or investment needs and work out whether we have something that fits;
• communicate with you by phone, email, and — if you gave us a mobile number — text message, about your inquiry;
• send you information about our programs, where you have asked for it or where the law otherwise permits it;
• understand and improve how the site performs and what content is useful;
• protect the site and our business — security, fraud prevention, and detecting misuse; and
• comply with our legal, regulatory, and record-keeping obligations, and establish or defend legal claims.

We do not use the information collected through this site to make automated decisions that produce legal or similarly significant effects about you. A person reads your inquiry and a person makes the credit decision.

8. How We Share Information

We share personal information only where there is a reason to:

• Service providers — the vendors that run the things this site depends on, acting on our instructions. For this website, that is our website host, Resend (which delivers form submissions to us as email), our business email provider, and Google (for Analytics and Fonts).
• Lending partners, investors, and counterparties — where it is relevant to the inquiry you made and to progressing a potential transaction. For example, information about a proposed loan may be shared with a capital partner or a participant in that loan.
• Professional advisers — our attorneys, accountants, auditors, and insurers, where they need it to advise us.
• Transaction parties — where a deal moves forward, the parties that have to be involved to close it, such as title companies, closing attorneys, appraisers, and insurers.
• Legal and regulatory — where we are required by law, subpoena, court order, or a regulator, or where we reasonably need to in order to enforce our terms, investigate fraud, or protect the rights and safety of anyone.
• Business transfers — if our business or its assets are merged, acquired, financed, or reorganised, information may pass to the successor as part of that transaction.

Third parties we share with for their own separate purposes act under their own privacy policies, not this one.

9. We Do Not Sell Your Information

We do not sell personal information, and we do not share it for cross-context behavioural advertising or targeted advertising. We do not trade, rent, or licence our inquiry list to anyone.

We also do not process sensitive personal data through this site for profiling purposes.

10. How Long We Keep It

We keep information only as long as we have a reason to.

Inquiry correspondence is kept for as long as needed to answer you and to maintain a record of the relationship, and after that for as long as we may need it for our legal, regulatory, tax, audit, and record-keeping obligations, or to establish or defend a legal claim. Where a transaction closes, the records associated with it are kept for the periods lending and securities record-keeping rules require. Analytics data is kept according to the retention period configured in Google Analytics.

When we no longer need information, we delete it or render it anonymous. If you ask us to delete your information, see section 12.

11. How We Protect It

We take reasonable administrative, technical, and physical measures to protect personal information — the site is served over HTTPS, access to our business email and records is limited to the people who need it and protected by authentication, and we keep the number of places information lives deliberately small. Not running a form database is part of that.

But we should be honest with you: no method of transmitting information over the internet, and no method of storing it, is completely secure. We cannot guarantee absolute security, and email in particular is not a secure channel. Please do not send us sensitive details like account numbers by email or through this site.

12. Your Privacy Rights

Under the Connecticut Data Privacy Act (CTDPA), Connecticut residents have the right to:

• Confirm and access — confirm whether we are processing your personal data, and get access to it;
• Correct — have inaccuracies in your personal data corrected, taking into account its nature and purpose;
• Delete — have personal data you provided, or that we obtained about you, deleted;
• Portability — obtain a copy of the personal data you gave us, in a portable and, where technically feasible, readily usable format;
• Opt out — of targeted advertising, of the sale of personal data, and of profiling in furtherance of decisions producing legal or similarly significant effects. As explained in section 9, we do none of these — but the right stands; and
• Be free from discrimination for exercising any of these rights. We will not deny you a service, charge you differently, or give you a lesser result because you asked.

Note that some information is exempt from these rights — including data governed by the Gramm-Leach-Bliley Act and the Fair Credit Reporting Act, which covers a good deal of what a lender holds once a transaction is under way. Where an exemption applies we will tell you.

13. How To Make A Request

Email info@rivalending.com with "Privacy request" in the subject line, or write to us at the address in section 20, or call (860) 303-7968. Tell us what you would like us to do and enough about how you contacted us that we can find your records.

We will need to verify that the request is really from you — usually by confirming details against the correspondence we already hold — before we act on it, and we may ask for more information if we cannot. If we cannot verify you, we will tell you rather than acting on an unverified request. An authorised agent may make a request on your behalf with proof of authority.

We will respond within 45 days. If we need more time we may extend that once by a further 45 days, and we will tell you why within the first period. There is no charge for a reasonable request; we may charge or decline where a request is manifestly unfounded, excessive, or repetitive, and we will explain if so.

14. How To Appeal

If we decline your request, we will tell you why in our response. You have the right to appeal that decision.

To appeal, reply to our response, or email info@rivalending.com with "Privacy appeal" in the subject line, within a reasonable time of our decision. We will review it and give you a written answer, with our reasoning, within 60 days.

If your appeal is denied, you may contact the Connecticut Attorney General to submit a complaint. We will give you a means of doing so in our appeal response.

15. Residents Of Other States

We serve investors and operators across the Northeast, so some of you will not be Connecticut residents. If your state has a comprehensive consumer privacy law that applies to us, you have the rights that law gives you, and we will honour them on the same request routes described in section 13. In practice we try to extend the rights above to anyone who asks, wherever you live, so long as we are permitted to.

16. Email And SMS Opt-Out

You can tell us to stop contacting you at any time:

• Email — use the unsubscribe link in any marketing email, or just reply and ask.
• Text message — reply STOP to any message. Reply HELP for help. Message frequency varies, and message and data rates may apply.
• Phone — say so on any call, or email us, and we will stop calling.

We may still send you messages we need to send about an active transaction, or that the law requires, after you have opted out of marketing.

17. Children's Privacy

This site is a business-to-business site for real estate investors and is not directed to children. We do not knowingly collect personal information from anyone under 18, and you must be at least 18 to use this site. If you believe a child has given us information, contact us and we will delete it.

18. Third-Party Links

Our articles link to outside resources — Connecticut state agencies, for example — for your convenience. We do not control those sites and this policy does not apply to them. Read their privacy policies before giving them information.

19. Changes To This Policy

We will update this policy as our practices, this site, or the law change. The revised version will be posted on this page with a new "Last updated" date at the top, and it takes effect when posted. If a change is material, we will make reasonable efforts to flag it more prominently. Please check back from time to time.

20. How To Reach Us

Questions about this policy, or about how we handle your information? A person will answer.

Riva Lending
455 Boston Post Rd
Old Saybrook, CT 06475

Phone: (860) 303-7968
Email: info@rivalending.com
Hours: Monday–Friday, 9am–5pm ET

For the terms governing use of the site generally, see our Terms & Conditions.

---

Riva Lending originates business-purpose loans secured by non-owner-occupied real estate; we are not a consumer lender. Interests in the Riva Real Estate Credit Fund are available to accredited investors only and involve risk, including possible loss of principal. Past performance is not indicative of future results. NMLS #[NMLS ID]. This page is a template prepared for Riva Lending's review; it is not legal advice and should be reviewed by counsel before publication. Additional privacy notices may be required by Connecticut and federal regulation, including the Gramm-Leach-Bliley Act where it applies.