Privacy
What we collect and why.
Riverside Robots Pte. Ltd. is the organisation responsible for the personal data described here. This notice covers riversiderobots.com. It describes what the site actually does today, not what it might do once the shop opens.
What we collect
If you create a membership
- Your email address.
- Whether you asked for occasional updates, and the exact wording you agreed to.
- A referral code, if you arrived through another member's link, and the referral relationship that creates.
- How you first reached us: campaign tags in the link you followed, the website that sent you, and the page you landed on. We keep the sending site's address only, never the full link you came from.
- Anything you choose to add to your profile: a display name, your builder level, and your interests. All of it is optional and you can change it at any time.
- Your Rivets and how you earned them.
- Sign-in sessions, including the IP address and browser your device reports. This is how passwordless sign-in stays secure and how we limit abuse.
We never ask for a password. Signing in sends a one-time link to your email address, valid for fifteen minutes.
If you tell us you follow Riverside Robots on social media, we take your word for it. We do not connect to your social account and we store nothing from it.
If you apply to join the team
- Your name, email address, and the optional link you provide.
- The Markdown file you upload, its filename, and its size.
- The wording of the consent you gave when applying.
Why we collect it
- To create and operate your membership, and to sign you in.
- To send occasional updates, only if you asked for them.
- To credit referrals and award Rivets.
- To understand which channels bring people to Riverside Robots. We review this as counts by channel, not as a list of individuals.
- To assess your application and contact you about it, if you applied.
- To keep the site secure and to limit abuse of sign-in and submission forms.
We do not sell personal data, and we do not share it with advertisers or data brokers.
Who else handles it
- Railway hosts the application and the database, in Singapore.
- Resend delivers sign-in emails. Your email address and the one-time link pass through their service, which operates outside Singapore.
Both act on our instructions and only for the purposes above.
How long we keep it
- Your membership: for as long as your account exists. Ask us to delete it and we will.
- Signup records for addresses that never became accounts: twelve months, then deleted automatically.
- Expired sign-in sessions: removed once they expire.
- Applications: twelve months after the hiring round closes, unless you ask us to remove yours sooner.
- Abuse-prevention counters: twenty-four hours. These hold no email addresses or IP addresses; identifiers are hashed before they are stored.
Deletion runs automatically once a day. Application files are the exception: they are flagged for review rather than deleted on a timer, because their period runs from the hiring round closing.
Your choices
- Stop the updates. Turn off email updates on your account page at any time. It takes effect immediately. You will still receive sign-in links you request, because those are not marketing.
- See what we hold, or correct it. Email us and we will tell you or fix it.
- Delete your account. Email us and we will remove your account, profile, Rivets, and referral records.
Contact
Write to hey@riversiderobots.com for anything in this notice, including access, correction, withdrawal of consent, or deletion. We aim to respond within thirty days.
Changes
If this notice changes in a way that affects you, we will update the date above and, where the change is significant, tell members directly.