1Who we are
Riopex operates this website and the Riopex platform. Riopex is owned by Antitropy, LLC. For personal data collected through this website, Riopex is the controller: it decides what is collected and why.
This notice covers the website and the enquiries made through it, and nothing else. Personal data inside the Riopex platform is processed on the group's instructions, under a separate data processing agreement, and the group is its controller. The platform's providers are on the subprocessor register.
2Definitions
- We, us
- Riopex.
- The website
- riopex.com and every page under it.
- The platform
- The Riopex product a group signs in to. It is not covered by this notice.
- Personal data
- Information about a person who can be identified from it, directly or indirectly.
- Controller
- Whoever decides why and how personal data is processed.
- Processor
- A third party that processes personal data on a controller's instructions, and for no purpose of its own.
3What we collect
Three things only: what you type into the pilot request form, the records our hosting provider keeps to serve the site, and a short-lived record that protects the form.
- From the form: your name, your work email, the group or company you write from, your role, its structure, what you are after, anything you add in the last field, and that you ticked the consent box.
- From your visit: the request records our hosting provider keeps, which include an IP address, a timestamp, the page requested and the browser's user agent.
- A short-lived record of recent submissions, keyed to a network address, used only to stop the form being abused.
4What we leave alone
The website carries no advertising, no third-party advertising cookies, no social media trackers, no session recording and no cross-site profiling. We do not buy contact data, and we do not enrich what you send us from other sources.
There is no account to create on the website, so there are no credentials to store.
5Why we use it, and on what basis
5.1Your enquiry
A person reads what you send through the form and uses it to reply to you, and for nothing else. The basis is your consent, given by the box on the form, together with our legitimate interest in answering a business enquiry made to us.
5.2Hosting records
We use hosting records to run the site securely and to investigate abuse, on the basis of our legitimate interest in keeping it available and safe.
The only mail that follows a request is the reply. We will not send you marketing you did not ask for, add you to a mailing list, or use your enquiry to approach another part of your organisation.
6How long we keep it
| Record | Kept for |
|---|---|
| Your enquiry | While the conversation is live, then up to 24 months, so that we remember a previous exchange. Ask, and we delete it sooner. |
| Hosting request records | The retention period our hosting provider applies: 1 day. |
| Rate-limit records | Minutes; they expire on their own. |
7Who processes it
Two processors run the website for us: one hosts it, one sends the email that carries your enquiry to us. Each is engaged on terms that oblige it to process personal data only on our instructions. We do not sell personal data, and we do not share it with anyone for their own purposes.
| Processor | What it does | What it may process |
|---|---|---|
| Vercel | Hosts and delivers the website | Request records, including the IP address and user agent, and a form submission in transit. |
| Resend | Sends the email that carries your enquiry to us | Your name, your email address and the request being sent. |
8International transfers
Our processors may handle data outside the country you write from. Where they do, it is under the transfer mechanisms in the processor's agreement with us.
Where the platform's data sits is a separate question: its location is set for each group's instance and agreed with the group.
9Your rights
Depending on where you are, you may have the right to:
- ask for a copy of the personal data we hold about you;
- have it corrected or deleted;
- object to, or restrict, how we use it;
- withdraw your consent;
- complain to your data protection authority.
Write to hello@riopex.com and we will act on it. We will not ask you to justify the request, and we will not charge for it.
10Cookies
The website sets no advertising or analytics cookies. A cookie it does set is strictly necessary to serve the page or to protect the form, and it carries no advertising identifier.
11Changes
This notice is a draft for counsel review. When it changes materially, the date at the top changes with it, and data you sent for one purpose is never put to a new one without notice.