RAVIZARSign In

Legal

Privacy Policy

Effective date: June 2026

1. Introduction

RAVIZAR ("we", "us", "our") is committed to protecting the privacy of organisations and individuals who use our platform. This Privacy Policy explains how we collect, use, store, and protect information in connection with the RAVIZAR platform.

2. Information We Collect

Organisation Information

  • —Company name, registration details, email domain, contact information.
  • —Subscription and billing information.
  • —Company registration request details.

User Information

  • —Full name, email address, job title, engineering discipline.
  • —Authentication credentials (managed securely via Supabase Auth).
  • —Role and permission assignments within the platform.

Platform Usage Data

  • —Standards documents uploaded by your organisation.
  • —Deviation requests, decisions, conditions, and audit trails.
  • —AI assessment outputs and engineering reasoning records.
  • —Experience and knowledge records captured through the platform.
  • —Login activity and session information.

Technical Data

  • —IP addresses, browser type, device information.
  • —Platform usage analytics and performance data.

3. How We Use Your Information

We use collected information to:

  • —Provide, maintain, and improve the Services.
  • —Process company registrations and onboarding.
  • —Conduct AI-assisted due diligence on registration requests.
  • —Authenticate users and manage access control.
  • —Generate AI assessments and engineering analysis.
  • —Issue invoices and process payments.
  • —Communicate service updates, maintenance, and policy changes.
  • —Investigate security incidents and enforce Terms of Service.
  • —Comply with legal obligations.

4. Data Isolation & Company Confidentiality

RAVIZAR maintains strict company-level data isolation. Your organisation's standards, deviations, experience records, and all associated data are:

  • —Accessible only to users within your organisation.
  • —Never shared with, visible to, or accessible by any other organisation on the platform.
  • —Isolated at the database level using Row Level Security controls.
  • —Never used to train AI models that could expose your data to other organisations.

5. AI Processing

Deviation documents, standards content, and engineering data submitted to RAVIZAR are processed by our AI assessment engine to generate analytical outputs. This processing occurs within our secure infrastructure. Data submitted for AI assessment is not used to train general-purpose AI models or shared with third-party AI providers beyond what is necessary to deliver the Services.

6. Data Retention

Active Accounts

Data is retained for the duration of the active subscription and made available to the subscribing organisation.

Suspended Accounts

All data is retained during the suspension period. Storage costs accrue at the applicable rate during this period.

Terminated Accounts

Following confirmed termination and settlement of outstanding amounts, all organisational data is permanently deleted within 30 days. Users are notified in advance of the data deletion schedule.

Audit Logs

Platform audit logs may be retained for up to 7 years for compliance and legal purposes.

7. Data Security

We implement appropriate technical and organisational measures to protect your data including:

  • —Encryption in transit (TLS) and at rest.
  • —Role-based access controls.
  • —Row Level Security at the database layer.
  • —Regular security reviews and vulnerability assessments.
  • —Secure credential management via enterprise authentication infrastructure.

8. Third-Party Services

RAVIZAR uses the following categories of third-party service providers to deliver the Services:

  • —Cloud infrastructure and database hosting.
  • —AI model providers for assessment processing.
  • —Email delivery services for platform notifications.
  • —Payment processing services.

All third-party providers are contractually bound to maintain appropriate data protection standards.

9. Cookies & Tracking

RAVIZAR uses session cookies necessary for authentication and platform functionality. We do not use advertising cookies or track users across third-party websites.

10. Your Rights

Subscribing organisations and their users have the right to:

  • —Access personal data held about them.
  • —Request correction of inaccurate data.
  • —Request deletion of personal data (subject to legal retention requirements).
  • —Object to certain processing activities.
  • —Receive a copy of personal data in a portable format.

To exercise these rights, contact: admin@ravizar.com

11. Children's Privacy

RAVIZAR is a professional B2B platform not directed at individuals under 18. We do not knowingly collect data from minors.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to registered organisations with 30 days notice.

13. Contact

For privacy-related enquiries: admin@ravizar.com

Privacy enquiries?

admin@ravizar.com