Privacy Policy

1. Who we are

RPTX LLC is a limited liability company registered in the State of Wyoming, United States. We publish this website and our products under the brand name “RPTX Software”; the contracting legal entity is always RPTX LLC. Our registered agent is Northwest Registered Agent Service, Inc., 30 N Gould St Ste R, Sheridan, WY 82801, USA.

For any privacy-related request — including access, correction, deletion, or portability — email legal@rptxsoftware.com. We respond within one business day and complete verified requests within 30 days (or the shorter period required by applicable law).

2. What we collect

2.1 Information you give us

• Account data — email address, display name, and, if you create a workspace, your organisation name.
• Billing data — handled by our Merchant of Record (Paddle or LemonSqueezy). RPTX does not store card numbers, CVV codes, or full bank details.
• Support correspondence — the contents of messages you send to our support or legal inboxes.
• Content you upload to AskFolder — documents, file metadata, and derived embeddings. You control what you upload and can delete it at any time.

2.2 Information collected automatically

• Service logs — IP address, user-agent, timestamps, request paths, and error traces. Retained for up to 90 days for security and debugging.
• Usage metrics — aggregate, anonymised counts of product events (e.g. "a query was answered"). No document content is included in metrics.
• Cookies — session cookies required for authentication inside the product. The marketing site rptxsoftware.com does not set any cookies. We do not use third-party advertising or cross-site tracking cookies anywhere.

2.3 Website performance analytics

We use Cloudflare Web Analytics (Real User Monitoring) to measure the performance and reliability of rptxsoftware.com and askfolder.com. It is a deliberately minimal, privacy-first service:

• It does not set cookies, read localStorage, or place any identifier on your device.
• It does not fingerprint the browser or build a cross-site or cross-session profile.
• Cloudflare discards the originating IP address at the edge and stores only aggregate performance metrics — Core Web Vitals (LCP, CLS, INP), page and resource load timings, referrer domain, and coarse country-level geolocation.
• We use this data solely to detect regressions, fix slow pages, and understand how visitors find the site. It is never combined with account data or sold to third parties.

Cloudflare, Inc. acts as our processor for this data under Cloudflare's customer Data Processing Addendum and the EU Standard Contractual Clauses. Cloudflare is certified under the EU–U.S., Swiss–U.S., and UK Data Privacy Framework. Because this service is cookieless and does not track individual users, no separate consent banner is served. Cloudflare's role and certifications are listed on our subprocessors page.

Our legal basis for this processing is our legitimate interest in operating, securing, and improving the website (GDPR Art. 6(1)(f)). You can object to this processing at any time by emailing legal@rptxsoftware.com.

3. How we use it

• To operate, maintain, and improve the services you have signed up for.
• To authenticate you and prevent unauthorised access to your workspace.
• To provide customer support and respond to your requests.
• To comply with applicable legal obligations, including tax, accounting, and sanctions screening.
• To detect, investigate, and prevent fraud, abuse, or security incidents.

We do not sell personal data. We do not use your content to train our own AI models, and we contract with our AI providers specifically to prevent them from training on your inputs.

4. Subprocessors

We rely on a small number of reputable service providers to run the business. A current list is maintained at rptxsoftware.com/subprocessors. Each subprocessor is contractually bound to handle personal data consistently with this policy.

5. International transfers

RPTX is US-based and primarily stores data in US and EU regions of Cloudflare infrastructure. For customers in the EU, UK, or Switzerland, transfers outside the EEA are governed by the European Commission's Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal data, and to object to certain uses. California residents have additional rights under the CCPA/CPRA, including the right to know and the right to opt-out of "sharing" (we do not share personal data in the sense defined by the CCPA).

To exercise any of these rights, email legal@rptxsoftware.com from the address associated with your account. We may ask for additional information to verify your identity.

7. Retention

We retain account data for as long as your account is active and for a limited period afterwards to comply with legal obligations and resolve disputes. You can request deletion at any time. Backup copies are purged within 35 days of a deletion request.

8. Security

All network traffic is encrypted with TLS 1.2+. Stored documents are encrypted at rest with per-tenant keys; no customer's content is co-mingled with another's index. We maintain least-privilege access controls and log administrative actions.

9. Changes to this policy

We will post updates to this page and update the "Last updated" date above. For material changes we will notify account holders at least 30 days in advance via email.

10. Contact

Email legal@rptxsoftware.com for any privacy question. Postal mail can be sent care of our registered agent at the address in section 1.