Privacy policy

How Rivowall handles data

Transparency notice: this page describes the product’s privacy principles for the public launch. Contractual arrangements and the contact details for privacy requests are provided with the service agreement or account invitation.

Account and organization data

Rivowall processes the data needed to manage accounts, organizations, roles, and access. Passwords are never stored in readable form. Multi-factor authentication secrets and other sensitive mail data are protected; session, device, and account-link identifiers are stored hashed.

Content and screen data

Uploaded content, playlists, scheduling, screen status, and technical proof-of-play records are processed to deliver the agreed screen publication. Authorization and database policy keep each organization’s data separated from every other organization’s data.

Facebook and Instagram data, and removing access

With your permission, Rivowall reads only the data needed to show posts from a connected Facebook Page or professional Instagram account (Business or Creator) on your digital signage screens. Personal Facebook profiles and personal Instagram accounts are not supported.

For direct Instagram Login, Rivowall requests only the instagram_business_basic permission — no permission to publish, message, read or write comments, run ads, or read insights is requested. For Facebook Pages, Rivowall requests pages_show_list (to show you the list of Pages you manage), pages_read_engagement (to read the Page’s own posts, photos, videos, and events), and business_management (to find accessible Pages that are connected to a Meta Business Portfolio). Rivowall does not use this access to change business settings, manage ads, or publish anything on your behalf. The Instagram fallback through Facebook Login requests the same Page permissions plus instagram_basic. Rivowall fetches at most three recent posts per widget and renders them into a single self-contained snapshot image; it does not process video, embed external sites, read or post comments, or publish anything on your behalf.

Facebook Page access tokens exist only in server memory and are never written to storage. Long-lived Instagram and Facebook user tokens are encrypted at rest (AES-256-GCM) using the platform’s application key. The stored account list contains only the numeric account IDs and names needed to let you choose an account.

Remove the connection at any time via Settings → Content sources → Facebook or Instagram → Disconnect. Rivowall then deletes the stored access token; images already published to playlists or cached on offline screens may remain until you remove or replace that widget. You can also revoke access directly from your Facebook or Instagram account settings — Meta notifies Rivowall automatically when you do, and access is removed the same way. For a full data-deletion request, email info@rivowall.com with your organization name and the connected Facebook Page or Instagram account.

Security and logging

Rivowall logs the security and administrative actions needed to operate the platform. Secrets, passwords, and full access tokens are never written to logs. Temporary activation and account-link tokens have limited validity and are intended for single use.

Retention periods and requests

Retention periods follow the service being provided, applicable legal obligations, and the agreement with the organization. For access, correction, deletion, or other privacy requests, use the contact details in your service agreement or account invitation, or email info@rivowall.com.