Privacy Policy

1. Information we collect

• Account information: your name, email address, password (stored only as a secure hash) and the companies and roles you belong to.
• Second sign-in step: if you choose text message, your mobile number; if you choose an authenticator app, a protected secret; and records of browsers you ask us to remember.
• Business information you enter: companies, contacts, products, invoices, documents and similar trade records, which may include other people's names and contact details.
• Usage and device information: sign-in times, IP address, browser type, and logs of actions taken, kept for security and auditing.
• Browser storage: we keep your sign-in session and preferences in your browser so the Service works; we do not use advertising cookies.

2. How we use it

• to provide the Service, sign you in and keep your account secure;
• to send messages you need: invitations, verification and sign-in codes, password resets and notices about your work;
• to support you, fix problems and improve the Service;
• to meet legal obligations and enforce our Terms.

3. How we share it

We do not sell personal information, and we do not share it with third parties for their marketing purposes. We share it only:

• within your workspace, with the administrators of your company and with the broker or clients you work with in the Service;
• with service providers who run parts of the Service for us, such as cloud hosting, email and text-message delivery and, when you use them, AI-assisted features, under obligations to use it only to provide their service to us;
• when the law requires it, or to protect the rights, safety and security of our users, the public or us;
• with a successor if the Service is sold or reorganised, under this policy's protections.

4. Mobile numbers and text messages

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. We use your mobile number only to send the verification codes you asked for. We do not sell, rent or share mobile numbers, text-message opt-in data or consent with third parties or affiliates for their marketing or promotional purposes. Your number is passed only to the provider that delivers our messages, solely to deliver them. Reply STOP to any message to opt out, or remove text message as a sign-in method in Settings > Security.

5. How long we keep it

We keep account information while your account is open, and business records for as long as your company's workspace keeps them or the law requires. Security logs are kept for a limited period. When an account is closed we delete or de-identify its personal information unless we must keep it.

6. Security

We protect information with encryption in transit, access controls that keep each company's data to itself, protected storage of secrets, and audit logs. No system is perfectly secure, so please use a strong password and a second sign-in step.

7. Your choices and rights

You can see and correct your account details in the Service. Depending on where you live, you may also have the right to ask for a copy of your personal information, to have it corrected or deleted, or to object to some uses. Write to us at the address below; we may need to confirm who you are first. Where your information sits in a company's workspace, we may refer your request to that company.

8. Where it is stored

The Service is hosted in the United States. If you use it from elsewhere, your information is transferred to and processed there.

9. Children

The Service is for businesses and is not directed to children. We do not knowingly collect information from anyone under 16.

10. This website

• The contact form: the name, email address and company you give, and your role, company size and message if you add them. It comes to us by email so we can reply, and a copy is kept in our hosting logs.
• Page views: when a page loads, your browser tells us which page it was and which page sent you there. Nothing else goes with it, no cookie and no identifier. If your browser sends Do Not Track or Global Privacy Control, it sends nothing at all.
• Cookies: this site sets none, and runs no advertising or outside analytics scripts.
• Like any website, our hosting provider receives your IP address and browser type when a page loads, and uses them to serve and protect the site.

Sections 3, 5 and 7, on sharing, keeping and your rights, apply to it the same way.

11. Changes to this policy

We may update this policy. The effective date at the top changes when we do, and for a material change we will tell you in the Service or by email.

12. Contact

Questions or requests about your information: support@rbdstudios.net.