1. Data Ownership Principles

RitiFlow acts as a data processor for our business customers. Customer operational data, including employee lists, route coordinates, visit timestamps, and task evidence, belongs solely to the subscribing organization. RitiFlow does not monetize, sell, or aggregate customer operational telemetry for advertising.

2. Telemetry and Location Transparency

In applications such as Ritideck, location telemetry is collected strictly within the operational boundaries configured by the organization (such as active shift windows or manual check-in actions). Devices communicate their permission and accuracy state transparently, and location evidence is presented neutrally without deceptive background tracking.

3. Data Retention and Deletion

Organizations retain full control over data retention schedules. Upon subscription termination or upon request, all customer tenant databases, file attachments, and audit logs are securely erased or exported in standard formats (SQL/CSV/JSON).

4. Security and Encryption

All data in transit is encrypted using modern TLS 1.3 encryption. Data at rest is encrypted using AES-256 standard protocols. Enterprise VPC and on-premises deployments allow customers to apply their own cryptographic keys and firewalls.

5. Contact

For privacy or security inquiries, contact RitiFlow at ritiflow.com/contact.