Privacy Policy

1. Introduction

RiaVideos, Inc. ("RiaVideos," "we," "us," or "our") operates the educational video platform available at riavideos.us (the "Service"). This Privacy Policy explains what information we collect, why we collect it, and what choices you have. We've tried to write it in plain language. If anything is unclear, please email us at privacy@riavideos.us.

Our core commitment: We do not sell personal information. We do not run third-party advertising. We collect only what we need to operate the Service. For healthcare customers, RiaVideos is HIPAA compliant and signs a Business Associate Agreement (BAA) with every covered entity.

2. Information we collect

Information you provide

• Account information: name, email address, password, profile photo (optional).
• Billing information: handled by our PCI-compliant payment processor. We never store full card numbers.
• Content you create: saved videos and leaflets, notes, comments, support messages.

Information collected automatically

• Usage data: videos and leaflets viewed, completion status, time spent (used to power engagement reporting for your care team).
• Device data: browser type, operating system, IP address, language preferences.
• Cookies and similar technologies: see Section 7.

3. How we use information

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Process payments and prevent fraud.
• Send essential service communications (e.g. password resets, billing receipts).
• Provide customer support.
• Analyze how the Service is used so we can make it better — in aggregate, anonymized form.
• Comply with legal obligations.

We do not use your data for behavioral advertising, profile sharing with advertisers, or any purpose unrelated to delivering the Service.

4. When we share information

We share personal information only in these specific cases:

• Service providers who help us operate the Service (hosting, email delivery, payments). They are bound by contract to use the data only on our instructions.
• Legal requirements: when required by law, subpoena, or valid legal process. We notify users where legally permitted.
• Business transfers: in the event of a merger, acquisition, or sale of assets, we will notify users in advance and honor existing privacy commitments.
• With your consent for any other sharing.

5. Data storage and security

Your data is stored in secure data centers in the United States and the European Union, operated by SOC 2 certified providers. We use:

• TLS 1.3 encryption for data in transit.
• AES-256 encryption for data at rest.
• Strict access controls — only authorized employees can access user data, and access is logged.
• Annual third-party security audits.

We retain personal data for as long as your account is active, and for up to 90 days after deletion (to allow recovery and meet legal obligations). After that, data is permanently deleted or fully anonymized.

6. Your rights

Depending on where you live, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your account and associated data.
• Export your data in a portable format.
• Object to certain processing or withdraw consent.
• Lodge a complaint with a data protection authority.

To exercise any of these rights, email privacy@riavideos.us. We respond within 30 days.

7. Cookies and tracking

We use a small number of cookies:

• Essential cookies: needed to log in and use the Service. Cannot be disabled.
• Preference cookies: remember your settings (e.g. language, captions, playback speed).
• Analytics cookies: first-party only, used to understand aggregate usage. You can opt out in your account settings.

We do not use third-party advertising cookies. We do not allow third-party trackers on the Service.

8. Children's privacy

The Service is provided to healthcare organizations and is not directed to children. We do not knowingly collect personal data directly from children. Where pediatric or maternal education is assigned, it is delivered through a clinician or a parent/guardian, and any associated patient information is handled by the covered entity under our Business Associate Agreement. If you believe a child has provided us with personal information directly, contact privacy@riavideos.us and we will delete it.

9. Changes to this policy

We may update this Privacy Policy as the Service evolves. When we make material changes, we notify you by email and on the platform at least 30 days before the changes take effect. The "Last updated" date at the top of this page always reflects the most recent revision.

10. Contact us

For privacy questions, requests, or complaints, please contact:

RiaVideos Privacy Team
Email: privacy@riavideos.us
Mail: 410 Townsend St, Suite 200, San Francisco, CA 94107, USA
EU Representative: available on request for users in the European Union.