Privacy policy

Effective from 19 October 2026

Who processes the data

RITOLD OÜ (registry code 16402166, Betooni tn 15a-1, Lagedi alevik, Rae vald, 75303 Harju maakond, Estonia, hello@rixio.ee).

• Your account data (name, email, company, billing): we are the controller.
• Conversations on your website: you, the website owner, are the controller; we are the processor and act on your instructions.

What we process

Account: name, email, password (hashed), company name, invoice and payment details (card details are held by Stripe, not by us).

Website visitors: the messages of a conversation, the page and language it started on, a salted hash of the IP address (never the address itself) and, only if the visitor gives them, name, email, phone and the reason for contact. To write an answer, the message is sent to the AI service together with the relevant website content.

Purposes and legal bases

• Providing and billing the service – contract with the customer.
• Security and preventing abuse – legitimate interest.
• Accounting – legal obligation.

Where and how long

Data is stored in the European Union (Hetzner, Helsinki, Finland). Conversations are deleted after 90 days and contact requests after 24 months unless the customer sets shorter periods; any conversation or lead can be deleted at any time. Account data is kept until the account is closed, invoices for the period required by law.

Cookies

The chat widget stores the current conversation in the visitor's browser (localStorage) and sets no cookies. Analytics events (such as a booking click) go to the customer's Google Tag Manager only when the visitor has allowed statistics cookies. The dashboard uses a session cookie needed to sign in.

Subprocessors

See the list of subprocessors. A data processing agreement (DPA) is available on request: hello@rixio.ee.

Your rights

You have the right to access, correct and delete your data, to restrict or object to its processing, and to receive it in a portable format. Website visitors can also contact the website owner directly. You may lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee).