We collect information you provide directly to us and information automatically collected when you use RiskMate.
Account Information: Name, email address, and password when you create an account
Job Data: Client names, addresses, job types, risk factors, and mitigation checklists you create
Payment Information: Processed securely through Stripe or Whop (we do not store credit card details)
Usage Data: How you interact with the service, features used, and analytics data
Device Information: IP address, browser type, and device identifiers collected automatically
2. How We Use Your Information
We use the information we collect to:
Generate risk assessment reports and PDF documents
Manage your account and provide customer support
Process payments and manage subscriptions
Send service-related notifications and updates
Improve RiskMate's features and user experience
Detect and prevent fraud or abuse
Comply with legal obligations
3. Data Sharing
We do not sell your personal data. We may share your information with:
Service Providers: Supabase (database and authentication), Stripe or Whop (payments), and hosting providers necessary to operate the platform
Legal Requirements: When required by law, court order, or to protect our rights and safety
Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to users)
4. Data Storage & Security
All data is stored securely using Supabase servers with industry-standard security measures:
SSL/TLS encryption for data in transit
Encrypted storage for data at rest
Access controls and authentication requirements
Regular security audits and monitoring
While we implement strong security measures, no system is 100% secure. You are responsible for keeping your account password confidential.
5. Cookies & Analytics
We use cookies and similar technologies to:
Maintain your session and authentication state
Analyze usage patterns (via PostHog or similar analytics tools)
Improve service functionality
You can disable cookies through your browser settings, though this may affect service functionality.
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. After account deletion, we may retain certain data for legal compliance or legitimate business purposes.
7. Your Rights (GDPR / CCPA)
Depending on your location, you may have the right to:
Access: Request a copy of your personal data
Correction: Update or correct inaccurate information
Deletion: Request deletion of your data
Portability: Receive your data in a portable format
Opt-Out: Opt out of certain data processing activities
RiskMate is not intended for users under 18 years of age. We do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of changes by posting the new policy on this page and updating the "Last updated" date. Continued use of RiskMate after changes constitutes acceptance.
10. Contact Us
For questions about this Privacy Policy or to exercise your rights, contact us: