Privacy Policy

This notice explains how Riskonami processes personal data. Version 2026-08-12. This is a product draft pending counsel review.

1. Controller

Musmato BV (Netherlands) is the controller for Riskonami account and platform data. Contact us via the contact page.

2. What we collect

  • Account: email (from Google/Microsoft sign-in), name, role, organisation links, billing references, and consent records (Terms/Privacy version accepted).
  • Assessment content: session data, uploads, worksheets, reports, and related logs you create while using the product.
  • Technical / ops: authentication events, system logs, support requests, and usage metrics needed to run and secure the service.
  • Payments: handled by Stripe; we store entitlement and provisioning metadata, not full card numbers.

3. Why we process data

  • Provide and secure the service (contract / legitimate interests).
  • Create and manage your account when you sign in (contract).
  • Record Terms and Privacy acceptance (legal obligation / contract).
  • Process purchases and entitlements (contract).
  • Improve reliability and detect abuse (legitimate interests).
  • Comply with law and respond to support requests.

4. AI enrichment subprocessors

If you consent to AI enrichment inside an assessment, bounded prompts and relevant assessment context are sent to our model provider (currently OpenAI) to generate proposals. Those calls are transient for inference; Riskonami keeps the system of record in EU-hosted storage. You can skip enrichment on free/manual paths where the product allows.

5. Where data is hosted

Application data and files are hosted on Google Cloud in the EU (typically europe-west4). Authentication uses Google and/or Microsoft identity providers.

6. Retention

Product policy targets (may be automated):
ContextTarget retention after last activity
Forever-free / unpaid inactive sessions90 days, then purge
Paid entitlements / paid customers12 months after last activity / entitlement end unless a contract says otherwise
Inactive free accounts may be deactivated after 90 days without sign-in or session activity. Download reports you need to keep. Support clones follow a separate shorter retention purge.

7. Your rights

Depending on applicable law (including GDPR), you may request access, correction, deletion, restriction, or portability of personal data, and object to certain processing. Use the contact page. You may also lodge a complaint with a supervisory authority (in the Netherlands: Autoriteit Persoonsgegevens).

8. Cookies and sessions

We use session cookies required to keep you signed in and operate the product. We do not run a separate marketing cookie banner in this draft.

9. Changes

We may update this notice and ask you to re-accept a new version in the product when material changes occur.

10. Contact

Privacy questions: contact.