This Privacy Policy explains how NORTH EAST OFFSHORE SERVICES LTD (“Rivet”, “we”, “us”) collects, uses, shares and protects personal data when you use the Rivet build-planning service at noreasoffser.shop. Rivet is an online-only digital subscription tool. We do not sell physical materials, hardware or tools.

1. Who is responsible for your data

The data controller is NORTH EAST OFFSHORE SERVICES LTD, registered office 83 Long Walk Road Mastrick, AB16 5QQ, Scotland. For any privacy request, contact support@noreasoffser.shop or call +44 7940334786.

2. What we collect

Account data: name, email address, password hash, subscription plan and status.
Build inputs you enter: project descriptions, dimensions, materials, tools, skill level, budget and constraints you type into the Build Console.
Generated results: the plans, cut lists, technical drawings and walkthroughs produced from your inputs.
Files you upload: optional space photos, sketches or reference images you attach to a project.
Payment metadata: billing name, country, subscription and invoice records. We never receive or store your full card number — see section 5.
Support data: messages you send through our contact and support forms and by email.
Technical data: IP address, device and browser type, and cookie or analytics identifiers (see our Cookie Policy).

3. Collection sources — where the data comes from

Our collection sources are:

Directly from you: when you register, type into the Build Console, upload files, subscribe or contact us.
Automatically from your device: cookies, log data, IP address and device/browser information.
From our payment processor: limited billing metadata used to confirm and manage your subscription.

4. Why we use it and our legal bases

To provide the service — generate plans, visuals and walkthroughs from your inputs (performance of a contract).
To manage subscriptions and billing (performance of a contract / legal obligation).
To provide support and respond to enquiries (legitimate interests / contract).
To secure and improve the service, prevent abuse and debug issues (legitimate interests).
To send service messages (contract) and, only with your consent, product updates you can opt out of at any time.
To meet legal and tax obligations (legal obligation).

We do not use your inputs, uploads or generated results to train AI models. Your build inputs are processed only to produce your own results.

5. Payment provider boundary

Payments are processed by Stripe. Card details are entered on Stripe’s secure, PCI-DSS compliant systems. Rivetdoes not see or store your full card number, CVC or full card expiry. We receive only limited billing metadata (for example billing country, the last four digits, subscription and invoice status) needed to operate your subscription.

6. AI data processing — user input, generated results and uploads

User input: the project descriptions, dimensions, materials and constraints you type into the Build Console are user input that we send to our AI generation provider solely to produce your requested plan, visuals and walkthrough, and are then stored against your account so you can revisit and export them.
Generated results: the plans, cut lists, drawings and walkthroughs generated from your user input belong to you and are stored against your account until you delete them.
File uploads and sample data: uploaded photos and sketches are processed only to generate your plan and are cached for up to 30 days, after which they are cleared unless you have saved the project.
Retention and deletion: you can delete a project at any time, which removes its user input, uploads and generated results from your account and from our active systems.
No model training: we do not use your user input, uploads or generated results to train, fine-tune or improve any AI model, and we do not publish your projects or share them with other users.

7. Who we share it with

We share data only with processors who help us run the service, under contract and appropriate safeguards:

Hosting & delivery: our cloud hosting and content-delivery provider.
Payments: Stripe, for subscription billing.
Database & storage: our managed database and file-storage provider.
AI generation provider: the model provider that renders technical visuals and walkthroughs from your build inputs, processing them only to return your result.
Email: our transactional email provider, for account and support messages.

We do not sell your personal data. We may disclose data where required by law.

8. International transfers

Some processors may store or process data outside the UK or EEA. Where they do, we rely on adequacy decisions or Standard Contractual Clauses (with the UK Addendum where relevant) to protect your data.

9. How long we keep it

Account and subscription records: for the life of your account and up to 6 years afterwards to meet legal and tax obligations.
Build inputs and generated results: until you delete the project or close your account.
Uploaded files: cached up to 30 days unless saved to a project.
Support messages: up to 24 months.

10. Security

We use encryption in transit, access controls, and reputable infrastructure providers. No method of transmission or storage is completely secure, but we work to protect your data and to notify you and regulators of any breach as required by law.

11. Your rights (UK GDPR / EU GDPR / CCPA)

Depending on where you live, you may have the right to:

Access the personal data we hold about you.
Correct inaccurate data or complete incomplete data.
Erase your data (“right to be forgotten”).
Restrict or object to processing.
Data portability.
Withdraw consent at any time where processing is based on consent.
For California residents: know, delete, correct, and opt out of “sale” or “sharing” of personal information, and not be discriminated against for exercising these rights.

To exercise any right, email support@noreasoffser.shop. We respond within the timeframe required by law.

12. Do Not Sell or Share

We do not sell your personal information and we do not share it for cross-context behavioural advertising. If this ever changes, we will provide a clear opt-out and update this policy first.

13. Cookies and analytics

We use essential cookies to run the service and, with your consent, limited analytics. See our Cookie Policy for details and controls.

14. Automated decisions and children

Rivet generates planning suggestions but does not make legal or significant automated decisions about you. The service is not for children: it may not be used by anyone under 13, and users aged 13–17 must have verifiable parental or guardian consent. Content involving power tools or hazardous work requires adult supervision.

15. Changes and contact

We may update this policy and will post the new version here with a revised date. Questions or complaints? Contact support@noreasoffser.shop, NORTH EAST OFFSHORE SERVICES LTD, 83 Long Walk Road Mastrick, AB16 5QQ, Scotland. You also have the right to complain to your local data protection authority (in the UK, the Information Commissioner’s Office).