Privacy Policy

Overview

This Privacy Policy describes how Voxire (“we”) collects, uses, shares, and protects personal data in connection with the rtylr platform. We act as a data controller for personal data about our customers and website visitors, and as a data processor for Customer Data that our customers process in rtylr on behalf of their own end-users.

If you are an end-user of a business that uses rtylr (for example, a diner whose email is captured in a restaurant’s CRM), the rtylr customer is the controller of your data. Please contact that business first to exercise your rights; we will help them do so.

Data We Collect

Account and billing data

When you create a workspace we collect name, email, business name, role, country, and a password hash. When you subscribe, our payment processor (Paddle) collects billing address, tax identifiers, and card tokens. We do not store raw card numbers on our servers.

Customer Data

Depending on the applications your business uses, Customer Data can include customer contact and loyalty records, orders, employee and payroll records, recruitment applications and CVs, invoices, schedules, and tasks. The business determines why this data is collected and supplies its own notices and lawful basis. A privacy-policy acknowledgement is not consent to unrelated marketing.

Usage and device data

We log IP address, browser/device type, referring URL, pages accessed, and timestamps. We use this to operate, secure, and improve rtylr, and to generate aggregate analytics.

Cookies and similar technologies

See the Cookies section below for details.

How We Use Data

We use personal data to:

• provide, secure, and maintain the Service;
• process billing and send transactional emails;
• respond to support requests and improve product quality;
• detect and prevent fraud, abuse, and security incidents;
• send product announcements to the primary owner on a workspace (you can opt out from your profile);
• comply with legal obligations and enforce our Terms.

Legal Bases (GDPR)

For EEA/UK residents, we rely on the following legal bases:

• Contract, to provide the Service and manage billing.
• Legitimate interests, to secure the Service, detect abuse, and improve features. We balance these interests against your rights.
• Consent, for non-essential cookies and certain marketing communications. You can withdraw consent at any time.
• Legal obligation, when we are required to retain or disclose data by law.

Sharing and Sub-Processors

We use service providers and other recipients to operate rtylr. Their legal role depends on the service: a payment merchant may act as an independent controller rather than a subprocessor. The providers named in this notice include:

• Cloudflare, CDN, DNS, DDoS protection.
• Paddle, payment processing and merchant of record.
• Firebase / Google Cloud, authentication infrastructure.
• Resend / Postmark, transactional email delivery.
• PostHog / Axiom, product analytics and error tracking (when enabled).
• Google Analytics, optional website analytics after acceptance; Sentry, application diagnostics when configured.

A current list is available on request at privacy@voxire.com. We notify customers before adding a new sub-processor that has access to Customer Data.

We do not sell personal data. We do not share personal data with advertisers.

International Transfers

rtylr may process data outside your country of residence. Where we transfer data from the EEA, UK, or Switzerland, we rely on the European Commission’s Standard Contractual Clauses (2021) or an equivalent mechanism.

Retention and Deletion

• Account data is retained for the life of the account plus 30 days for recovery, then deleted within 60 days.
• Billing records are retained for 7 years to comply with tax and accounting rules.
• Security logs are retained for 90 days; audit logs for 12 months.
• Encrypted backups are on a rolling schedule and purged within 90 days.

Your Rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you;
• correct inaccurate data;
• request deletion of your data;
• object to or restrict processing;
• port your data to another service;
• withdraw consent at any time (where processing relies on consent);
• lodge a complaint with a supervisory authority.

To exercise your rights, email privacy@voxire.com. We may request information reasonably necessary to verify your identity or an authorized representative. We respond within the period required by applicable law and explain any permitted extension or refusal. You may complain to your local data-protection authority and, where applicable, appeal a refusal. We will not discriminate against you for exercising your rights.

Cookies

We use three categories of cookies:

• Strictly necessary, authentication, load balancing, CSRF protection. These are always on.
• Preference, remember your language, theme, and workspace selection.
• Analytics, help us understand which pages work and which don’t. These only run with your consent (visible on first visit).

Use “Cookie preferences” in the website footer to reopen your choice and withdraw optional analytics consent. The rtylr-consent cookie remembers your choice for up to one year across rtylr.com subdomains. You can also remove cookies in your browser; removing authentication cookies may sign you out.

Children

rtylr is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has registered, contact privacy@voxire.com and we will delete the account.

Changes to This Policy

We may update this Privacy Policy to reflect changes to the Service or the law. When we do, we update the “Last updated” date and, for material changes, notify primary owners by email.

Privacy Contact

Our Data Protection contact is reachable at privacy@voxire.com. Postal mail: Voxire, c/o Data Protection, Beirut, Lebanon.