Privacy Policy

1. Introduction

Your privacy is critical. Rilavek ("we", "us") is designed to be a pass-through service. Our core architecture prioritizes not storing your file data. This Privacy Policy explains what information we collect and how we use it.

2. Zero-Knowledge Architecture

Rilavek operates strictly as a real-time pass-through gateway:

• No File Storage: We do not store your files, not even temporarily. Data is streamed in transit directly to your destination storage without ever being saved to a local disk or intermediate server.
• Zero Content Visibility: It is impossible for us to view or reconstruct your file contents by design. We do not inspect, analyze, or mine payload data.
• Metadata Only: If you request technical assistance, our support logs only display high-level transmission records (such as timestamps, file sizes, and transfer success codes), never the actual files.

3. Information We Collect

We collect the minimum amount of information necessary to operate the Service:

• Account Information: When you sign in using a third-party OAuth provider (such as Google or GitHub), we receive your email address and profile name provided by that service. We do not collect or manage personal account login passwords, as account authentication is handled entirely by your OAuth provider.
• Configuration Data: We store the settings of your data pipelines (such as source protocols, storage destinations, and routing rules) necessary to operate the transfer gateway. We encourage using restricted-scope keys for target storage buckets; Rilavek does not require read permissions.
• Usage Logs: We collect metadata logs (e.g., "File A transferred to Destination B", timestamps, file sizes, success/failure status) to provide you with transfer history and ensure pipeline reliability.
• Customer Communications: When you reach out through our live support chat or email, we retain your conversation and contact details to assist you. Our support chat operates directly within our first-party infrastructure.

4. Cookies and Tracking Technologies

We believe web applications are overloaded with intrusive tracking. We maintain a minimal, privacy-first posture:

• No Advertising or Tracking Networks: We never deploy marketing pixels, advertising cookies, behavioral fingerprinting, or third-party tracking scripts. We do not sell or monetize your data.
• Cookieless and Uncorrelated Analytics: Our site analytics and interface diagnostics run entirely without cookies and do not track you across other websites. Telemetry is completely detached from our user database. We do not record account IDs, emails, or foreign keys in analytics events, meaning your browsing activity cannot be linked back or correlated with your user account.
• Session Diagnostics: During our early preview, we analyze anonymous interface interactions within our first-party infrastructure to troubleshoot rendering bugs and streamline user onboarding. All input fields are automatically masked, ensuring credentials and typed form data are never recorded.
• Strictly Essential Storage Only: We use only the storage strictly necessary to operate the application. This includes an encrypted, HTTP-only session cookie to keep you securely signed in to your dashboard, and local storage to preserve your active conversation if you open our support chat.

5. How We Use Your Information

We use the collected information only to:

• Provide, operate, and maintain the Service.
• Process transactions and billing.
• Monitor and analyze usage and trends to improve Service performance.
• Detect, prevent, and address technical issues or abuse.

6. Data Retention

We retain metadata logs for a limited period to allow you to view your transfer history. You may delete your account at any time, which will remove your configuration data and personal information from our active databases.

7. Third-Party Services

We manage our core services, support infrastructure, and analytics directly on our own dedicated servers. We do not sell, rent, or share personal information with third parties for marketing or tracking. If we engage infrastructure providers for routine routing or system operations, they process data strictly on our behalf under confidentiality terms.

8. Security

We value your trust in providing us your Personal Information, thus we are striving to use commercially acceptable means of protecting it. But remember that no method of transmission over the internet, or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.