Privacy Policy

1. Who we are

Rizo ("Rizo", "we", "us") provides AI-powered customer messaging automation. For questions about this policy contact legal@rizo.live.

2. Data we collect

• Account data: name, business name, email address, and authentication records.
• Business content: FAQs, images you upload (menus, price lists, schedules, product photos), calendar feeds, and bot settings.
• Customer conversations: messages exchanged between your customers and Rizo through connected channels such as WhatsApp and Instagram, including phone numbers or handles.
• Billing data: processed by our payment provider; we do not store full card numbers.
• Technical data: IP address, device and browser information, and usage logs used for security and reliability.

3. How we use data

• To provide, operate, and improve the service, including generating AI replies based on your business content.
• To authenticate you, including emailing one-time verification codes.
• To process payments, prevent fraud and abuse, and comply with legal obligations.
• We do not sell personal data and do not use your customer conversations to train third-party models.

4. Legal bases

Rizo operates in Jordan, the United States, the United Arab Emirates, and the Kingdom of Saudi Arabia. Where applicable law (such as the GDPR, Jordan's Personal Data Protection Law, UAE PDPL, Saudi PDPL, or applicable US state privacy laws) requires, we rely on contract performance, legitimate interests, consent, and legal obligation.

5. Sharing

We share data only with service providers acting on our instructions (hosting, AI model providers, messaging platforms, payment processing, email delivery), when required by law, or in a business transfer. A list of sub-processors is available on request.

6. Security

Customer messages are encrypted at rest with AES-256-GCM. Access is restricted by row-level security, and sign-in requires an emailed one-time code.

7. Retention

We keep data for as long as your account is active and as needed to meet legal obligations. You can request deletion at any time; backups are purged on a rolling basis.

8. Your rights

Depending on your location you may access, correct, delete, export, or restrict processing of your data, and object or withdraw consent. Email legal@rizo.live. You may also complain to your local data protection authority.

9. International transfers

Data may be processed outside your country. We use appropriate safeguards such as standard contractual clauses where required.

10. Children

Rizo is not directed to individuals under 18 and we do not knowingly collect their data.

11. Changes

We will post updates here and notify account holders of material changes.

12. Saudi Arabia and UAE data protection

• For businesses and individuals in the Kingdom of Saudi Arabia, we process personal data in line with the Saudi Personal Data Protection Law (PDPL, issued by Royal Decree No. M/19 of 1443H, as amended) and its Implementing Regulations.
• For businesses and individuals in the United Arab Emirates, we process personal data in line with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).
• Businesses using Rizo must collect their customers' clear opt-in consent before sending any marketing or promotional messages through Rizo, and must honour opt-out requests promptly. Replies to messages a customer initiates are service messages, not marketing.