Privacy Policy

This policy describes how RiskForesight handles personal data for the marketing site (riskforesight.app) and the product (my.riskforesight.app) during early access.

1. What we collect

• Account data — email address, name, authentication data (including MFA enrolment).
• Workspace content — the schedules, risks, costs and documents you upload to run analyses.
• Operational data — logs and security events needed to run and protect the service.

The marketing site itself sets no advertising trackers.

2. How we use it

• To provide and secure the service — authentication, permissions, backups.
• To send transactional email (notifications, digests) you can control in preferences.
• We do not sell personal data or use your content to advertise.

3. AI features

When you use AI features, relevant workspace content is sent to our AI model providers to generate the response. Email notifications redact risk titles by default. Restricted installs can pin a no-egress mode in which AI features that would send data to external model providers are disabled.

4. Where data lives

Production data is hosted with our cloud subprocessors in the United Kingdom / European region. A current list of subprocessors is available on request.

5. Retention and deletion

Workspace content is retained while your account is active. You can request deletion of your workspace and account at any time; backups roll off on a fixed schedule afterwards.

6. Your rights

Depending on your jurisdiction (including under UK/EU GDPR), you may have rights to access, correct, export or erase your personal data. Contact us and we will respond within the statutory period.

7. Contact

Privacy requests: sales@riskforesight.app.