Privacy Policy

Riskora provides software for creating risk assessments, method statements and other health & safety paperwork. When we say "we" or "us", we mean Riskora. When you use our website or app, we're responsible for looking after the personal information you give us.

If you have any questions about your information, get in touch through our support page and a real person will reply.

We only collect what we need to run the service and improve it. That includes:

• Your account details — your name, email, and company.
• The documents you create — the safety paperwork you build and any files you upload.
• Billing information — your plan and subscription status. Card details are handled by our payment provider; we never see or store them.
• How you use the site — which pages you visit and basic device info (browser, screen size) so we can fix problems and improve the product.

We only use your information for a few clear reasons:

• To provide the service you signed up for and keep your account working.
• To keep the platform secure and prevent misuse.
• To improve our product based on how it's actually being used.
• To meet our legal obligations, such as tax and accounting records.

Cookies are small files saved by your browser. We use them for two things only:

• Essential cookies keep you signed in and remember your cookie choices. These are always on because the site won't work without them.
• Optional cookies help us understand how the site is used and measure our marketing. These only run if you accept them.

You can change your mind at any time by clicking Manage cookies at the bottom of any page.

We don't sell your information. We only share it with trusted companies that help us run Riskora — for example, the providers we use for hosting and storage, payments, sending emails, and (if you've opted in) analytics. Each of these providers is bound by a written agreement to handle your data securely and only on our instructions.

We host your data in the UK or the EU wherever possible. If any information needs to leave the UK or EU (for example, because one of our service providers is based in the US), we make sure it's protected by legally recognised safeguards approved under UK and EU data protection law.

We keep your account and documents for as long as you have an active subscription, and for a short period afterwards in case you come back or in case we need to meet legal obligations like accounting records. You can ask us to delete your data sooner — just let us know.

You have the right to:

• Ask for a copy of the personal information we hold about you.
• Have anything inaccurate corrected.
• Ask us to delete your data.
• Ask us to stop using your data for certain things.

Contact us through the support page to use any of these rights. If you're ever unhappy with how we've handled your information, you can also complain to the UK's data protection regulator, the Information Commissioner's Office (ico.org.uk).

If we make changes, we'll update the "Last updated" date at the top of this page. If the changes are significant, we'll also let you know by email or in the app.