UPDATED OCTOBER 9, 2026

Privacy, plainly.

This notice covers riveraorg.com, Rivera Education and The Blueprint, provided by The Rivera Organization LLC. Existing Blueprint invoices through Mercury identify ONEN LLC as payment collector on behalf of the course provider. Existing consulting clients retain their private project access.

What we collect

If you send a request, we store your name, email, business name, selected service, delivery preference, business description and goals, traction stage, intended timing, support/budget preference and any optional website you provide. We record the request time and the version of this notice you accepted. Client sign-in uses an email address, a hashed password and a session. For an active project, we store its status, next steps, private messages with sender and time, and published documents with their version and upload details.

Course accounts and purchases

For The Blueprint, we store your name, email, hashed password, email confirmation, privacy consent, course edition, purchase and agreement acceptance, invoice reference and status, access dates, saved exercise answers, quiz attempts and scores, progress, completion and support messages. If you have a previous call purchase, its scheduling records are retained. We also store an optional phone number, handwritten workbook strokes, profile and security changes, certificate details and purchase-consent evidence, including the request IP address and browser information. Phone numbers are not marketing consent. Enrollment does not subscribe you to marketing unless you separately choose the optional organization newsletter and confirm it by email. For legacy invoices, Mercury receives the name and email needed to create your customer record and invoice. For direct Rivera Education checkout, Stripe receives your email, order reference, price and payment information on its hosted service. We retain payment references, status, agreement acceptance and the access those payments fund. Card and bank credentials are entered with the payment provider, not in our classroom. We do not collect bank login credentials.

Your course work is private to your account and authorized service operators. We do not send it to an AI model automatically. Course support replies are available in your account. Transactional emails, when enabled, concern verification, recovery and your purchases; account creation does not subscribe you to marketing.

Buying without signing in

Guest checkout collects your name, email, purchase consents and payment reference before you set up a password. We keep a provisional classroom record to deliver the purchase. A private purchase link permits order review and verified-payment downloads for 48 hours; it does not prove ownership of an existing account. After payment, new learners receive a separate seven-day email link to set up classroom access. We retain hashed or encrypted security tokens and delivery events, such as when a download response begins; that event does not prove a file was saved or read. Existing account passwords are not changed by a purchase. Incomplete checkouts and provisional records are reviewed for deletion within 12 months unless needed for an active account, transaction, dispute or legal obligation.

We record verified purchase amounts and subsequent payment holds or refunds for internal reporting. Google Ads is not installed. Optional ChatGPT Ads measurement is described below.

Why we use it

We use these details to review and respond to your request, organize service delivery and protect account access. A request does not subscribe you to marketing. We do not sell your enquiry details or send the contents of your message to advertising platforms.

Storage and access

The application and database are hosted on the dedicated Onen application infrastructure. Access is limited to authorized project operators and infrastructure providers needed to run the service. Authorized operators can review enquiries. Client files and messages require an authenticated account with access to that project. Authorized service staff can read and reply to project messages, update the project and publish files. Messaging is asynchronous; transactional email notifications may alert you to a reply without including your private message text.

Organization newsletter

If you choose and confirm our newsletter, Angel Rivera and The Rivera Organization may email you news, courses, product launches and offers across the organization’s brands and initiatives. The Rivera Organization is the sender; this does not authorize independent brands to use your address for their own mailing lists. We record your email, signup source, confirmation, the consent wording and version, and any unsubscribe request. Newsletter signup is optional and is not a condition of course access. You can unsubscribe from all organization marketing at any time using the link in an email, without losing course access. Necessary account, security and purchase emails continue separately. A phone number does not authorize marketing calls or texts. Earlier consent choices are preserved rather than automatically replaced by this notice.

Education launch updates

If you ask for education launch updates, we store your email, selected plan, request and confirmation dates, consent wording and version, and unsubscribe status. We use this separate list to send availability and launch offers for the plan you selected. Your request does not create a course account or general newsletter subscription. Authorized staff can review requests in a private dashboard. Confirm by email within 48 hours. Each launch message will provide an unsubscribe link; you can also stop these updates from the private preferences page reached after confirmation or request deletion through our contact form. Unconfirmed requests and inactive or unsubscribed entries are reviewed for deletion within 12 months unless retention is needed for a legal obligation.

Private operational reporting

Authorized organization administrators can review account and newsletter status, signup source, access dates and course milestones to operate the service. They may use a private reporting tool or a chosen AI provider to review a limited report. Reports contain summary counts by default; a separately authorized connection can include names, emails and enrollment or subscription status. These reports exclude passwords, payment credentials, workbook answers, quiz answers and private support messages. Reporting connections are read-only, expire and can be revoked; access is logged. Data deliberately shared with a reporting provider is also handled under that provider’s terms and privacy practices. No AI connection is enabled automatically.

Cookies and logs

We use essential session and request-security cookies. Server access logs may include IP address, request path, browser information and timestamps for operation and security. We count daily page views and outbound Muse clicks without retaining a visitor identifier in those counts. We use the existing session to record the first relevant signup page and record a course member’s first lesson opening. Counts may include repeat visits and bots and do not reveal activity inside Muse. Optional advertising cookies are controlled separately through Privacy choices. External links, including Forbes, SEC and Vadera Pulse, lead to sites with their own privacy practices.

Affiliate applications and referrals

If you apply to the affiliate program, we store your requested referral name, display or business name, promotion channel, application text, application consent, review decisions and status. Approved referral links record a daily browser-session visit using a random session identifier stored as a hash. We associate eligible signups and purchases with the referring affiliate for attribution and accounting. Referral attribution may depend on the same browser session; signed-in account records can preserve an eligible referral for up to 30 days. Affiliates see limited order references, payment status and sales totals, not learner email addresses, private workbook content or quiz answers. Link visits may include bots and repeat sessions. Affiliate attribution is separate from the optional advertising measurement described below.

You can export your affiliate application with your account data. Closing your account deactivates your referral link and removes your application text and promotion channel. Required attribution, financial and decision records may be retained for accounting, disputes or legal obligations. Other application records are reviewed for deletion within 12 months after closure unless a longer retention period is required. Contact support for correction or a specific retention review.

Certificate verification

Completion certificates are private by default. If you enable public verification, anyone who obtains or guesses your credential ID can view your recipient name, course, completion date and certificate status. There is no public directory. You can turn sharing off in your certificate page or Profile & security. Account deletion removes the active certificate and its verification page. Copies others have already saved cannot be recalled. Annual number counters contain no personal information and are retained so credential IDs are never reused.

Optional ChatGPT Ads measurement

When you allow measurement through Privacy choices, we use OpenAI’s ChatGPT Ads pixel to measure public-page visits, course views, checkout starts and verified purchases. OpenAI receives event times, the website origin, product identifiers, purchase value and currency, and advertising/browser identifiers when available. Its network requests also expose your IP address and browser information. The pixel has advanced matching enabled: after consent, it can recognize contact details provided on public forms, such as your name, email or phone number, normalize them and send SHA-256 hashes to OpenAI. Our server-side integration, when enabled, sends a hashed purchase email for conversion matching. Hashing does not make this anonymous. We do not deliberately send raw contact details, payment credentials, private links, workbook or quiz answers, or support messages. Advertising scripts are excluded from the private classroom, account-security pages and staff tools.

The pixel’s first-party __oppref cookie lasts up to 30 days; __obref lasts up to 365 days. Our essential rivera_ad_choice preference lasts up to 180 days. Browser settings may shorten these periods. We retain encrypted attribution and event payloads for up to 30 days, with limited delivery records for troubleshooting and accounting. Your choice is per browser. You can decline or withdraw through Privacy choices without affecting purchases or learning. We respect Global Privacy Control; withdrawal stops future sends and clears advertising cookies, but cannot recall events already received by OpenAI. We send the opt-out flag for future user-level personalization. OpenAI handles received data under its privacy policy.

Your choices

Only send information needed for an initial conversation. Do not send passwords, identity documents, private financial statements or sensitive personal details through the enquiry form. You can request access, correction or deletion through our contact form, identifying your request as a privacy request. We may need to verify identity before acting.

Retention and changes

Enquiries are kept while responding and considering the engagement. If no engagement proceeds, they will be reviewed for deletion within 12 months of the last substantive contact, unless a legal obligation or dispute requires retention. Backup copies may persist through their normal rotation. Course account and learning records are retained while providing access and support, then reviewed for deletion within 12 months after access ends unless required for a dispute, legal obligation or purchase record. Financial and acceptance records may need longer retention. Request a specific review through support. Export your saved workbook and account data from Profile & security. You can change your email through confirmation, update your password and delete your account there. Deletion removes active learning content and anonymizes your sign-in profile; required transaction, accepted agreement and security records are retained for legal obligations and disputes. Do not include confidential investor documents. Downloaded files stay on your own device. Newsletter signup is optional, uses a confirmation link, and records consent and unsubscribe status. Newsletter emails identify the sender and include an unsubscribe link. Confirmation and account links contain limited-use tokens; do not share them.