Privacy Policy

Last updated: 12 July 2026

This policy describes how RiskForesight handles personal data for the marketing site (riskforesight.app) and the product (my.riskforesight.app) during early access.

1. What we collect

Account data — email address, name, authentication data (including MFA enrolment).
Workspace content — the schedules, risks, costs and documents you upload to run analyses.
Operational data — logs and security events needed to run and protect the service.

The marketing site itself sets no advertising trackers.

2. How we use it

To provide and secure the service — authentication, permissions, backups.
To send transactional email (notifications, digests) you can control in preferences.
We do not sell personal data or use your content to advertise.

3. AI features

When you use AI features, relevant workspace content is sent to our AI model providers to generate the response. Email notifications redact risk titles by default. Restricted installs can pin a no-egress mode in which AI features that would send data to external model providers are disabled.

4. Where data lives

Production data is hosted with our cloud subprocessors in the United Kingdom / European region. A current list of subprocessors is available on request.

5. Cookies and analytics

We use strictly necessary cookies to run the service and keep you signed in. Optional product analytics (PostHog, EU region, with session-replay input masking) is consent-based— it is off by default and loads only after you accept, and you can change your choice anytime from Profile → Settings → Privacy & cookies. We use no advertising cookies or cross-site tracking. See our Cookie Policy for details, and our Subprocessors list for the third parties involved.

6. Retention and deletion

Workspace content is retained while your account is active. You can request deletion of your workspace and account at any time; backups roll off on a fixed schedule afterwards.

7. Your rights

Depending on your jurisdiction (including under UK/EU GDPR), you may have rights to access, correct, export or erase your personal data. Contact us and we will respond within the statutory period.

8. Contact

Privacy requests: privacy@riskforesight.app.