Legal
Privacy Policy
Last updated: 6 September 2026
1. What we collect
Account data: your name, email address and sign-in method (email/password, Google or Apple).
Board content: the questions and briefs you submit, company profiles you build in Company Brain, documents you upload, and the board's responses, debates, decisions and journal entries.
Usage and billing data: credit balances, plan details and payment status (card details are handled by our payment processor and never touch our servers).
2. How we use it
We use your data to operate the service: authenticating you, running board sessions on your briefs, storing your sessions and history, enforcing credit limits, processing payments and improving the product. We do not sell your data and we do not use your private briefs to advertise to you.
3. Third-party AI providers — important
To answer your briefs, their content — together with relevant Company Brain context and any documents you upload — is sent to third-party AI providers (currently OpenAI, Anthropic and Manus) for processing. These providers process the content under their own terms and privacy policies. Please do not submit information you are not comfortable sharing with those providers.
4. Privacy of your boardroom
Your sessions, companies, documents and journal are private to your account. Access is controlled at the database level so that other users cannot read your rows. Demo content is clearly badged and separate from your data.
5. Storage, retention and deletion
Data is hosted on our cloud infrastructure providers. We retain your data while your account is active. You may delete sessions, companies and uploaded documents at any time, and you may request full account deletion by contacting us — we will remove your account and associated content within a reasonable period, except where we must retain limited records for legal or payment-audit purposes.
6. Security
We use encryption in transit, access controls and row-level isolation to protect your data. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.
7. Your rights
Depending on where you live (including the UK and EEA), you may have rights to access, correct, export or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us at the address below.
8. Changes and contact
We may update this policy from time to time and will post the new version here with a revised date. For any privacy question or request, contact us at events@ritalix.com.