LEGAL

RITVA — Cookie Policy

AI Visibility Infrastructure Platform

Version: 1.0
Effective Date: June 12, 2026
Last Updated: June 12, 2026
Platform: ritva.ai
Contact: privacy@ritva.ai

Table of Contents

• Introduction
• What Are Cookies?
• Types of Cookies We Use
• Essential Cookies
• Authentication & Session Cookies
• Analytics Cookies
• Performance & Monitoring Cookies
• Preference Cookies
• Third-Party Cookies
• Cookie Management
• Do Not Track Signals
• Changes to This Policy
• Contact Information

1. Introduction

This Cookie Policy explains how Ritva ("we," "us," or "our") uses cookies and similar tracking technologies on the Ritva Platform at ritva.ai. It describes what cookies are, which cookies the Platform uses, why we use them, and how you can control them.

This Cookie Policy should be read alongside:

• Privacy Policy — which describes how we collect, use, and protect your personal data
• Terms of Use — which governs your access to and use of the Platform

By continuing to use the Platform after being presented with our cookie notice, you consent to the use of cookies as described in this Policy, except where those cookies are categorized as essential, in which case they are necessary for the Platform to function and do not require separate consent.

2. What Are Cookies?

Cookies are small text files that are placed on your device — computer, tablet, or mobile — when you visit a website or use a web application. They are widely used to make websites and platforms work, remember your preferences, and provide usage information to operators.

Cookies are not programs and cannot execute code or deliver viruses. They simply store small amounts of data that a web server can read back the next time you visit.

Similar technologies — including local storage, session storage, and tracking pixels — may serve comparable purposes. Where this Policy refers to "cookies," it includes these related technologies unless the context indicates otherwise.

3. Types of Cookies We Use

Ritva uses the following categories of cookies on the Platform:

Each category is described in detail in the sections below.

4. Essential Cookies

Essential cookies are required for the Ritva Platform to operate. They enable core security, anti-fraud, and state management functions. Without these cookies, the Platform cannot function correctly.

These cookies cannot be disabled through the Platform's cookie controls. You may block them through your browser settings, but doing so will prevent you from using the Platform.

Essential cookies used by Ritva include:

Security and CSRF protection
Cookies used to prevent cross-site request forgery (CSRF) attacks. These ensure that form submissions and state-changing actions originate from legitimate user sessions on the Platform.

Login state
A cookie that records whether you are currently logged in to your account. This allows the Platform to identify you as an authenticated user as you navigate between pages without requiring you to log in on every request.

Session integrity
Cookies that maintain the continuity of your current session, ensuring that your actions within the Platform are linked correctly to your account and browser context.

Fraud prevention
Cookies used to detect unusual or potentially fraudulent activity patterns, including account takeover attempts and automated abuse.

5. Authentication & Session Cookies

Authentication and session cookies are a specific class of essential cookie used to manage your account access on the Platform.

Because Ritva is an account-based platform — with user dashboards, saved reports, audit history, visibility data, and subscription management — these cookies are fundamental to the Platform's core function.

Account authentication
Set when you log in to your account. Identifies your session as authenticated and maintains your login state for the duration of your session or until you log out.

Session management
Manages the active state of your browser session on the Platform, including tracking which features you are using and maintaining context as you move between sections of the Platform.

Account security tokens
Short-lived tokens used to verify that requests originate from an active, authenticated session associated with your account. These expire automatically at the end of your session or after a defined inactivity period.

Remember me / persistent login
Where you opt in to a persistent login, a longer-lived cookie is set to allow the Platform to recognize your device on your next visit, enabling faster authentication without a full sign-in. This cookie can be cleared at any time by logging out of the Platform.

6. Analytics Cookies

Analytics cookies help us understand how users interact with the Platform so we can improve it over time. They collect information about which features are used, where users spend time, and how Platform workflows are completed.

Analytics data is collected on a pseudonymous or aggregated basis. It is not used to identify you personally and is not sold to third parties.

What we measure:

• Usage trends and active user patterns across the Platform
• Feature adoption — which tools, reports, and functions are most used
• Audit generation activity — how often visibility audits and reports are initiated and completed
• Visibility workflow analytics — how users move through the Platform's core analysis and recommendation workflows
• Traffic analysis — pages visited, session duration, and navigation paths
• Platform performance from a user experience perspective

Analytics providers we use:

• PostHog (or equivalent) — event tracking, session analysis, and product analytics
• Vercel Analytics — page performance, web vitals, and traffic data

You can opt out of analytics cookies through the Platform's cookie consent controls or your browser settings. Opting out of analytics does not affect your ability to use the Platform.

7. Performance & Monitoring Cookies

Performance and monitoring cookies are used to maintain the reliability and quality of the Platform. They support error tracking, load management, and diagnostic functions that help us identify and resolve technical issues.

Error tracking
Cookies and session identifiers used in conjunction with our error tracking tools to capture and report application exceptions. These allow us to diagnose bugs and resolve issues that affect user experience.

Load balancing
Cookies used by our infrastructure providers to route your requests to the appropriate server, ensuring stable and responsive Platform performance.

Performance diagnostics
Data collected to monitor page load times, API response times, and infrastructure latency. Used to identify performance degradation and prioritize optimization work.

Reliability monitoring
Session and request identifiers used to track whether Platform services are functioning correctly and to support incident detection and response.

Performance and monitoring cookies collect technical data about Platform behavior and do not contain personal information beyond session identifiers.

8. Preference Cookies

Preference cookies store your settings and customizations so that the Platform can remember your choices across sessions. They improve your experience by ensuring the Platform behaves consistently with your preferences without requiring you to reconfigure settings on each visit.

Preference cookies may store:

• Theme and display preferences — your selected display mode or visual settings
• Dashboard configuration — the layout, arrangement, or default views you have set within your account dashboard
• Language and locale settings — your preferred language or regional formatting settings where applicable
• UI customization — any other interface preferences you have configured within the Platform

Preference cookies are set only as a result of your own actions within the Platform. Disabling them will not prevent you from using the Platform but will mean your preferences are not remembered between sessions.

9. Third-Party Cookies

Some cookies on the Platform are set by third-party providers whose services are integrated into the Platform's infrastructure or analytics stack. These providers may set their own cookies in accordance with their own privacy and cookie policies.

Third-party providers whose services may result in cookies being set on your device include:

Third-party cookies are governed by the policies of the respective providers. Ritva does not control the content or operation of third-party cookies. We recommend reviewing the privacy and cookie policies of the providers listed above for details on their data practices.

Connected integrations: If you choose to connect third-party services to your Ritva account (such as Google Search Console or other analytics platforms), those integrations may introduce additional cookies or tracking mechanisms governed by the policies of the respective third-party provider. Ritva is not responsible for cookies set by connected third-party platforms.

10. Cookie Management

You have several options for managing cookies on the Platform.

Cookie consent banner
When you first access the Platform, you will be presented with a cookie consent notice that allows you to accept or decline non-essential cookies. You can update your preferences at any time through the cookie settings link in the Platform's footer.

Browser settings
All modern browsers allow you to view, manage, block, and delete cookies through their settings. Browser-level controls apply globally to all websites and may affect your experience on the Platform. Guidance for common browsers:

• Chrome — Settings → Privacy and Security → Cookies and Other Site Data
• Firefox — Settings → Privacy & Security → Cookies and Site Data
• Safari — Preferences → Privacy → Manage Website Data
• Edge — Settings → Cookies and Site Permissions → Cookies and Site Data

Account settings
Some preference cookies can be reset or cleared directly within your Platform account settings.

Effect of disabling cookies
Disabling essential or authentication cookies through browser settings will prevent you from logging in and using the Platform. Disabling analytics, performance, or preference cookies will not prevent access but may reduce functionality or result in your preferences not being retained between sessions.

11. Do Not Track Signals

Some browsers include a Do Not Track (DNT) setting that sends a signal to websites requesting that your browsing activity not be tracked.

Ritva does not currently respond to browser-based Do Not Track signals. This is because there is no consistent industry standard for how DNT signals should be interpreted or honored, and our analytics and monitoring practices serve legitimate operational purposes described in this Policy.

If you wish to limit tracking, we recommend using the cookie management options described in Section 10.

12. Changes to This Policy

Ritva may update this Cookie Policy from time to time to reflect changes to the cookies we use, updates to applicable law, or changes to the Platform's features and third-party integrations.

When changes are made:

• The updated Policy will be published at ritva.ai/cookies with a revised effective date
• Where changes are material — such as the introduction of a new category of cookie — we will provide notice via the Platform's cookie consent interface or by email

Your continued use of the Platform following the effective date of any update constitutes acceptance of the revised Policy.

13. Contact Information

For questions about this Cookie Policy or about the cookies used on the Platform:

Privacy and cookie inquiries:
privacy@ritva.ai

General support:
support@ritva.ai

*This Cookie Policy is subject to legal review and may be updated prior to commercial launch. Ritva recommends that all legal documents be reviewed by qualified legal counsel before publication.*

© 2026 Ritva. All rights reserved.
ritva.ai — Cookie Policy v1.0