Privacy Policy

Last updated: February 12, 2026

This Privacy Policy explains how RiskBases collects, uses, and protects personal data when you visit our website or use our platform.

Who we are

RiskBases is a software platform for construction risk analysis. For privacy questions, contact: support@riskbases.com.

What we collect

  • Account data: name, email address, company name, role
  • Platform usage data: login events, feature usage, page views (limited)
  • Project data you submit: project inputs, risks, actions, reports
  • Support data: messages submitted via ticket forms
  • Billing data: subscription status and payment metadata via Stripe (we do not store full card details)

Why we use your data

  • To provide and operate the platform
  • To authenticate users and prevent fraud
  • To improve product quality and user experience
  • To respond to support requests
  • To manage subscriptions and invoices
  • To send important service communications (account, security, billing)

Legal basis

We process personal data based on contract necessity (to deliver the service), legitimate interest (to improve and secure the service), and where required, consent (for optional marketing communications).

Data sharing

We only share data with service providers needed to deliver RiskBases, such as hosting, authentication, and billing providers. We do not sell personal data.

International transfers

Some service providers may process data outside your country. Where applicable, we rely on appropriate safeguards such as standard contractual clauses.

Data retention

We retain personal data as long as needed to provide the service, meet legal obligations, resolve disputes, and enforce agreements. You may request deletion where applicable.

Your rights

  • Access, correction, or deletion of your personal data
  • Restriction or objection to processing in certain cases
  • Data portability (where applicable)
  • Withdraw consent (for marketing) at any time

To exercise rights, email support@riskbases.com.

Security

We use reasonable administrative, technical, and organizational measures to protect data, including access control and encryption in transit where available.

Updates

We may update this policy. Changes will be posted on this page with a revised date.