RVCO / PRIVACY
Privacy notice
This notice explains how RVCO handles information from this website and its software rescue inquiry. It does not authorize sending credentials, private code, production data, or client secrets.
Effective
Who is responsible
RVCO is the personal information controller for information you submit through the inquiry. To ask a privacy question or exercise a privacy right, email privacy@rvco.dev. RVCO may reply from hello@rvco.dev.
Information collected
The inquiry asks for your name, work email, organization, buyer type, affected system or workflow, business consequence, urgency, available access, paid-assessment acknowledgement, and optional confidentiality or white-label context. It also records your acceptance of this notice and a bot-check token.
When you visit, hosting, analytics, performance, abuse-prevention, and error-monitoring services may process technical information such as page path, referrer, approximate location, browser, device or operating system, performance measurements, IP address, and request metadata. RVCO does not attach inquiry text to analytics events or application logs.
Why the information is used
Inquiry information is used to review fit, respond, prepare a possible scope, protect the form, and maintain records reasonably needed for security, legal, or operational purposes. Your submission and consent allow RVCO to review and respond to the inquiry. Limited technical data is used to operate, secure, diagnose, and improve the site.
Cloudflare Turnstile performs an automated bot and abuse check before the form is accepted. That check does not decide whether RVCO accepts an engagement. A submission confirms receipt only; it does not create an engagement or start an assessment timetable.
Service providers and transfers
RVCO uses Vercel for hosting, anonymous website analytics, and performance measurements; Cloudflare Turnstile for abuse prevention; Resend for inquiry email delivery; and Sentry for limited error monitoring when configured. These providers may process information outside the Philippines under their own infrastructure and contractual safeguards. They receive only the information needed for their role. RVCO does not sell inquiry information or use it for third-party advertising.
Retention
RVCO normally keeps inquiry correspondence for up to 12 months after the last substantive contact. If an engagement begins, relevant records may be retained longer for contractual, accounting, security, dispute, or legal requirements. Provider copies may follow the provider's contractual retention period. Information is deleted or de-identified when it is no longer reasonably needed for these purposes.
Your choices and rights
Subject to applicable law, you may ask whether RVCO holds information about you and request access, correction, objection, deletion or blocking, or a portable copy. RVCO may need to verify your identity and may retain limited information when legally or operationally required. You may also raise a concern with the Philippine National Privacy Commission. See the NPC's overview of data subject rights.
Do not submit passwords or sensitive artifacts
Do not send passwords, API keys, access tokens, source code, logs, production data, database exports, private infrastructure details, or sensitive client files through the inquiry. If an engagement proceeds, access and evidence handling will be agreed separately.
Security and changes
RVCO uses reasonable technical and organizational safeguards, including server-side validation, bot checks, restricted delivery, and error scrubbing. No internet transmission or storage system is risk-free. This notice may change when the inquiry flow, providers, or handling practices change; the effective date above identifies the version that applies when you submit.