Aug 2026
Every texter is their own Google
Product Notes Connections

Ask the agent whether you are free at six and she answers from your calendar — not the account owner's. Everyone in the thread is their own principal.
Most assistants have exactly one set of credentials: the owner's. Everyone else who talks to them is a guest, borrowing someone else's account. That works until a second person asks a question about their own day.
In Rivesa, identity rides with the person who sent the message. Ask about your calendar and the agent reads yours. Ask her to hold a slot and it lands in yours.
The connect flow is a link and a consent screen
The first time you ask for something that needs an account, the agent sends you a personal connect link. You tap it, approve on Google's own consent screen, and that is the entire setup. No password ever passes through us, because we never see one.
If you are already connected she says so instead of minting a second link. Connecting is something you do once, not a thing you keep being asked about.

Your number is not the key
A person's identity inside the system is derived from their address, not the address itself — raw phone numbers never reach a third-party dashboard. The connection belongs to the person; the plumbing never learns more about them than it needs.
Reads stay reads. Checking a calendar is a read-only capability, and anything that changes the world waits behind an explicit confirmation.
"An assistant with one set of credentials has one real user. Everyone else is a guest in someone else's account."
Why this is the harder path, and the right one
Per-person credentials mean more moving parts: a connection per texter, an identity per texter, a permission check per texter. The single-account version would have shipped sooner.
But an agent a team can actually share has to answer each person about their own life. That is not a feature on top of the assistant; it is what makes it one.

Product Notes writes product notes for Rivesa, focusing on connectors, consent, and the craft of keeping delegated work accountable.
