Privacy Policy

Effective date: January 15, 2026 · Last updated: June 1, 2026

RiseX Software Inc. ("RiseX," "we," "us," or "our") provides AI-powered financial planning and reporting software (the "Service"). This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit risex.finance or use the Service.

1. Information we collect

We collect information in three ways: information you give us directly, information collected automatically, and information we receive from third-party services you choose to connect.

1.1 Information you provide

• Account information: name, work email, company name, and password when you sign up.
• Billing information: billing address and payment details, processed by our payment processor (we do not store full card numbers).
• Communications: information you provide when you contact support, request a demo, or fill out a form on our site.

1.2 Information collected automatically

• Usage data: pages viewed, features used, timestamps, and general interaction data within the Service.
• Device and log data: IP address, browser type, operating system, and device identifiers.
• Cookies and similar technologies, described in Section 6.

1.3 Information from connected accounts

When you connect an accounting platform (such as QuickBooks Online, Xero, or NetSuite), a bank feed, or another third-party service, we receive the financial data necessary to power forecasting, reporting, and budgeting features — for example transactions, invoices, account balances, and chart-of-accounts data. We only request the scope of access needed to provide the Service, and you can disconnect an integration at any time from your account settings.

2. How we use information

• To provide, operate, and maintain the Service, including generating forecasts, reports, and budget insights.
• To train and improve the underlying models used for forecasting and anomaly detection, using de-identified or aggregated data where feasible.
• To communicate with you about your account, updates, and support requests.
• To process payments and manage subscriptions.
• To monitor and improve the security, performance, and reliability of the Service.
• To comply with legal obligations and enforce our Terms of Service.
• With your consent, for marketing communications, which you may opt out of at any time.

3. Legal basis for processing (EEA/UK users)

If you are located in the European Economic Area or the United Kingdom, we process personal data under the following legal bases: performance of a contract (to provide the Service you sign up for), legitimate interests (to secure and improve the Service), consent (for optional marketing communications and certain cookies), and compliance with legal obligations.

4. How we share information

We do not sell your personal information. We share information only in the following circumstances:

• Service providers: vendors who host our infrastructure, process payments, send email, or provide customer support tooling, under contractual confidentiality and data protection obligations.
• Connected integrations: data flows to and from the accounting or banking platforms you explicitly connect, governed also by that provider's own terms.
• Legal & safety: where required to comply with law, respond to lawful requests, or protect the rights, property, or safety of RiseX, our users, or others.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to continued protection of your information under this policy or a materially similar one.
• With your direction: when you explicitly ask us to share data with a third party, such as an accountant you invite to your account.

5. Financial & accounting data

RiseX is financial planning and analytics software, not a financial institution. We do not initiate payments, hold customer funds, or extend credit. Financial data pulled from connected accounts is used solely to power the forecasting, reporting, and budgeting features of the Service and is never sold to data brokers or used to sell you unrelated financial products. You can revoke integration access at any time; revoking access stops future syncs but does not automatically delete previously synced data, which you can request separately (see Section 9).

6. Cookies & tracking technologies

We use strictly necessary cookies to operate the site and, with your consent where required, analytics and functionality cookies to understand usage and remember preferences. For full details on the categories of cookies we use and how to manage them, see our Cookie Policy.

7. Data retention

We retain account and financial data for as long as your account is active and as needed to provide the Service. After account closure, we generally retain data for up to 90 days to allow reactivation, then delete or anonymize it, except where longer retention is required for legal, tax, or accounting obligations, or to resolve disputes.

8. Security

We use administrative, technical, and physical safeguards designed to protect information, including encryption in transit and at rest, role-based access controls, and regular access reviews. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. See our Security page for more detail.

9. Your rights & choices

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent at any time. California residents have additional rights under the CCPA/CPRA, including the right to know what personal information is collected and to request deletion. To exercise any of these rights, contact us at [email protected]. We will respond within the timeframe required by applicable law, and we will not discriminate against you for exercising these rights.

10. International data transfers

RiseX is based in the United States, and information we collect may be processed in the U.S. or other countries where our service providers operate. Where required, we rely on appropriate safeguards, such as standard contractual clauses, for transfers of personal data originating in the EEA, UK, or Switzerland.

11. Children's privacy

The Service is intended for business use by individuals aged 18 and older. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us so we can delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or an in-product notice at least 14 days before taking effect. The "last updated" date above reflects the most recent revision.

13. Contact us

Questions about this Privacy Policy or our data practices can be sent to [email protected] or by mail to RiseX Software Inc., 228 Harborview Street, Suite 400, Wilmington, DE 19801, United States.