Privacy policy

Effective 2026-07-15. Short version: two modes. Local mode keeps your decks and media on your machine. Hosted workspaces store the work your team uploads so teammates can review it.

What we always hold (any mode)

• Account: your email and a salted hash of your password (we cannot read the password itself).
• Billing: handled by Stripe. We store your Stripe customer id and subscription status — never card numbers.
• Email we send: password resets, account notices, and (if you opt in) new-deck alerts for hosted projects. No marketing without your say-so.

Local mode

• Your decks, media, notes, and verdicts stay on your machine. We never receive them.
• License check-in: a fingerprint (hash) of your license key and when it last checked in. The check-in sends the key and nothing else — no file names, no content, no usage analytics.
• No telemetry from the launcher. There is none.

Hosted workspaces

• When you (or a teammate) publish to a hosted workspace, we store the media, notes, and verdicts you upload on our host so your team can see and swipe them.
• Media retention: after a deck is fully reviewed, media auto-deletes 30 days later — unless the archive add-on is on for that workspace (then media stays while you keep paying for the add-on, and still counts against storage quota).
• Verdicts: kept so your review history survives after media is purged. This is a review queue, not a forever file dump.
• Storage quota: each workspace has a live-media cap (Starter is 2 GB). Higher tiers are available when you need more room.
• Workspace membership, project roles, and submitter tokens live on our server so access control works.

Who else touches data

• Stripe (payments) — see Stripe's privacy policy.
• Our email provider (transactional mail only).
• Our host (account database and, for hosted workspaces, media and review data on our server's disk).

Deletion

Dashboard → Delete account: cancels billing and removes your account, keys, reset tokens, and hosted workspace content you own (media, deck rows, verdicts) as soon as we can process it. Local files on your machines are yours and are untouched — we never had them.

Questions

hello@riahstudio.com. A human answers.