This Privacy Statement explains how RIKAISO SE ("RIKAISO", "we") processes personal data when you visit rikaiso.com, help.rikaiso.com and api.rikaiso.com (together, the "Sites"), when you sign in to an account, and when you use the Ask RIKAI assistant. It applies alongside our Cookie Statement.
Who is responsible
RIKAISO SE, Hafenplatz 12, 20457 Hamburg, Germany, is the controller for the processing described here. You can reach our data protection officer at privacy@rikaiso.com or by post at the address above, marked "Data Protection".
What data we process
- Visitors. Server logs with a truncated IP address, browser type, referrer, the pages requested and timestamps; the country and language you choose in the country picker; and your cookie consent decision. The IP-based country suggestion is derived from an anonymised lookup and is not stored.
- Account holders. Your email address, sign-in timestamps, the roles assigned to you (for example editor or administrator), invitations you send or accept, and an audit trail of the changes you make in the administration area.
- Help Content API and MCP users. The name and creation date of API keys, the last time each key was used, OAuth client registrations, and the identity of the account that approved an OAuth connection.
- Ask RIKAI. The questions you type, the page you asked from, the language of the conversation, the answer generated, and a daily-rotating hash of your IP address that we use only to limit the number of requests per visitor. We do not ask for your name or contact details in the assistant, and we recommend that you do not enter personal data into it.
Why we process it and on what basis
| Purpose | Data | Legal basis |
|---|---|---|
| Operating and securing the Sites | Server logs, rate-limit hashes | Legitimate interest (Art. 6(1)(f) GDPR) |
| Remembering your country and language | Locale choice | Consent for the stored preference; otherwise session only |
| Recording consent decisions | Consent records | Legal obligation (Art. 6(1)(c) GDPR) |
| Providing accounts and the administration area | Account data, audit trail | Contract (Art. 6(1)(b) GDPR) |
| Answering questions through Ask RIKAI | Conversation content | Legitimate interest in providing self-service support |
| Improving published content | Aggregated assistant statistics | Legitimate interest |
Ask RIKAI and AI processing
Ask RIKAI generates answers from published help topics, the product catalog and knowledge-base articles written by RIKAISO. To generate an answer, the conversation is sent to a third-party model provider acting as our processor under a data processing agreement; it is not used to train that provider's models. Conversations are stored for up to 90 days so that we can review answer quality and abuse, then deleted. Answers can be wrong; they are not legal, financial or contractual statements.
Who we share data with
We share personal data only with service providers that act on our instructions: the hosting and edge-network provider that serves the Sites, the database and authentication provider that stores accounts and content, the model provider that powers Ask RIKAI, and the geolocation service that suggests your country from your IP address. We do not sell personal data and we do not share it with advertisers.
International transfers
Some providers process data outside the European Economic Area. Where they do, transfers rely on adequacy decisions or the European Commission's Standard Contractual Clauses, supplemented where necessary.
How long we keep data
- Server logs: 30 days.
- Consent records: 12 months after your last visit, or until you withdraw consent.
- Ask RIKAI conversations: 90 days.
- Account data and audit trail: for the life of the account and 12 months after it is closed.
- API key metadata and OAuth grants: until revoked, then 12 months.
Your rights
Depending on where you live you can ask us to access, correct, delete or export your personal data, to restrict or object to processing, and to withdraw consent at any time without affecting earlier processing. You can also lodge a complaint with a supervisory authority; ours is the Hamburg Commissioner for Data Protection and Freedom of Information. To exercise a right, write to privacy@rikaiso.com. Residents of California and other US states with comparable laws can use the "Do Not Sell or Share My Personal Information" control in the footer, which appears where those laws apply.
Cookies and similar technologies
Our Cookie Statement lists every cookie and storage entry we set, its purpose and duration, and lets you change your preferences at any time.
Children
The Sites are intended for business users. We do not knowingly collect personal data from children under 16.
Changes to this statement
We update this statement when our processing changes. The date at the top shows the current version; material changes are announced on the Sites before they take effect.
Contact
RIKAISO SE, Hafenplatz 12, 20457 Hamburg, Germany · privacy@rikaiso.com · +1-800-555-0199