Privacy Policy

Overview

This Privacy Policy describes how Voxire (“we”) collects, uses, shares, and protects personal data in connection with the rtylr platform. We act as a data controller for personal data about our customers and website visitors, and as a data processor for Customer Data that our customers process in rtylr on behalf of their own end-users.

If you are an end-user of a business that uses rtylr (for example, a diner whose email is captured in a restaurant’s CRM), the rtylr customer is the controller of your data. Please contact that business first to exercise your rights; we will help them do so.

Data We Collect

Account and billing data

When you create a workspace we collect name, email, business name, role, country, and a password hash. When you subscribe, our payment processor (Paddle) collects billing address, tax identifiers, and card tokens. We do not store raw card numbers on our servers.

Customer Data

This is the data you upload or generate inside rtylr, menu items, invoices, schedules, customer profiles, tasks. You control this data; we process it only to provide the Service and as instructed by you.

Usage and device data

We log IP address, browser/device type, referring URL, pages accessed, and timestamps. We use this to operate, secure, and improve rtylr, and to generate aggregate analytics.

Cookies and similar technologies

See the Cookies section below for details.

How We Use Data

We use personal data to:

• provide, secure, and maintain the Service;
• process billing and send transactional emails;
• respond to support requests and improve product quality;
• detect and prevent fraud, abuse, and security incidents;
• send product announcements to the primary owner on a workspace (you can opt out from your profile);
• comply with legal obligations and enforce our Terms.

Legal Bases (GDPR)

For EEA/UK residents, we rely on the following legal bases:

• Contract, to provide the Service and manage billing.
• Legitimate interests, to secure the Service, detect abuse, and improve features. We balance these interests against your rights.
• Consent, for non-essential cookies and certain marketing communications. You can withdraw consent at any time.
• Legal obligation, when we are required to retain or disclose data by law.

Sharing and Sub-Processors

We share personal data only with service providers (“sub-processors”) that help us operate rtylr, under contracts that require them to protect the data. Our primary sub-processors include:

• Cloudflare, CDN, DNS, DDoS protection.
• Paddle, payment processing and merchant of record.
• Firebase / Google Cloud, authentication infrastructure.
• Resend / Postmark, transactional email delivery.
• PostHog / Axiom, product analytics and error tracking (when enabled).

A current list is available on request at [email protected]. We notify customers before adding a new sub-processor that has access to Customer Data.

We do not sell personal data. We do not share personal data with advertisers.

International Transfers

rtylr may process data outside your country of residence. Where we transfer data from the EEA, UK, or Switzerland, we rely on the European Commission’s Standard Contractual Clauses (2021) or an equivalent mechanism.

Retention and Deletion

• Account data is retained for the life of the account plus 30 days for recovery, then deleted within 60 days.
• Billing records are retained for 7 years to comply with tax and accounting rules.
• Security logs are retained for 90 days; audit logs for 12 months.
• Encrypted backups are on a rolling schedule and purged within 90 days.

Your Rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you;
• correct inaccurate data;
• request deletion of your data;
• object to or restrict processing;
• port your data to another service;
• withdraw consent at any time (where processing relies on consent);
• lodge a complaint with a supervisory authority.

To exercise any of these rights, email [email protected]. We respond within 30 days.

Cookies

We use three categories of cookies:

• Strictly necessary, authentication, load balancing, CSRF protection. These are always on.
• Preference, remember your language, theme, and workspace selection.
• Analytics, help us understand which pages work and which don’t. These only run with your consent (visible on first visit).

You can clear cookies at any time from your browser. Doing so may log you out of rtylr.

Children

rtylr is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has registered, contact [email protected] and we will delete the account.

Changes to This Policy

We may update this Privacy Policy to reflect changes to the Service or the law. When we do, we update the “Last updated” date and, for material changes, notify primary owners by email.

Contact the DPO

Our Data Protection contact is reachable at [email protected]. Postal mail: Voxire, c/o Data Protection, Beirut, Lebanon.