This is draft copy for an early-stage product. It is not legal advice and is not yet a binding agreement. Final policy language will be published before general availability.
01
RiskCurb collects the information needed to provide a risk operating view: account details, the risk, control, and claims records you enter, and basic usage data that helps us run and improve the service.
Account details, such as your name and work email, identify you and your workspace. The risk, control, and claims records are content your team chooses to enter. Usage data is basic and helps us understand how the service is used.
If you contact us, we use the details in your message to reply. Nothing more is collected for that purpose.
02
Information is used to operate the service, support your team, and improve the product. Access follows the roles and ownership you configure within your workspace.
The records your team enters are used to render your registers, ratings, and reports. They are the working content of the service, not marketing data.
Usage data is limited and viewed in aggregate. It shows where the product works and where it needs attention.
03
Sharing and processors
RiskCurb does not sell your information. Beyond the established infrastructure providers that host and deliver the service, information is shared only to deliver support you have asked for, or where the law requires it. Providers process information only as needed to do that work on our behalf.
04
Data handling and access
Risk records, claims context, and reporting data are handled with disciplined access. We avoid unsupported compliance claims and focus on responsible, transparent handling.
Within a workspace, each member sees what their role allows. Owners and administrators decide who holds which role, and access changes when those roles change.
RiskCurb runs on established infrastructure providers. They process information only as needed to host and deliver the service.
05
Retention
Information is kept while your workspace is active, and for a reasonable period afterward so your records can be exported or recovered. Usage data is kept only while it remains useful for improving the service. Once information is no longer needed, it is deleted or anonymized.
06
Your rights and requests
You can ask to see, correct, export, or delete the information tied to your account. Workspace owners handle most of this directly from the product. For anything outside it, write to [email protected] and we will respond personally.
07
Questions about privacy can be directed to [email protected]. We will reply personally.
If any part of this policy is unclear, ask. Plain answers are part of how we work.