Privacy Policy

This Privacy Policy explains what information rikroots collects, how we use it, and the choices you have.

1. Information We Collect

Account information you provide (name, email, company name, password); Customer Data you enter (your customers, candidates, invoices, and related business records); usage data (pages visited, actions taken); and messages you send to Sophie.

2. How We Use Information

To provide and operate the Service; to send transactional emails (invoices, reminders, account notifications) on your behalf, branded with your company's identity where you've configured it; to process subscription billing; to respond to support requests; and to improve rikroots.

3. Third-Party Service Providers

We share data with the providers necessary to run rikroots, each under their own privacy commitments: Stripe (payment processing, only for tenants who connect their own account), Apple/Google/RevenueCat (subscription billing), Brevo (sending transactional email), and Anthropic (powering Sophie). We do not sell your data.

4. Data Storage & Security

Data is stored on servers we operate and is logically separated by tenant account. Passwords are stored using industry-standard hashing (bcrypt), never in plain text. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your data.

5. Data Retention

We retain your data for as long as your account is active. If a trial ends without converting to a paid subscription, or a subscription lapses, we retain your data for a limited period afterward so you can export it or reactivate before it is removed — you'll be notified by email before that happens. We keep a minimal record (company name and contact email) after removal for legitimate business purposes such as re-engagement.

6. Your Rights & Choices

You can export your Customer Data from within the app. You can request deletion of your account and associated data by contacting us. If you're located somewhere with statutory data rights (e.g. access, correction, deletion, portability), we'll honor requests to the extent required by applicable law.

7. Children's Privacy

rikroots is a business tool not directed at children, and we do not knowingly collect information from anyone under 16.

8. International Data Transfers

Depending on where you and our service providers are located, your data may be processed in a different country than where you're based.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We'll update the effective date above when we do.

10. Contact Us

Questions about this Policy can be sent to admin@xentera.ai.