Privacy Policy

RISKOPILOT is operated by HSESKILLS Ltd, a company registered in the United Kingdom. We provide AI-powered incident investigation tools using Shell Tripod Beta methodology.

Data Controller: HSESKILLS Ltd · Contact: privacy@riskopilot.com

Account data: Email address, display name, organisation name (provided at registration).

Investigation data: Incident narratives, severity assessments, sector information, facility names, evidence items, and AI-generated analysis results.

Audit data: Uploaded investigation reports (PDF/DOCX) are processed for scoring and immediately deleted after analysis. Only the scorecard results are stored.

Payment data: Processed by Stripe. We store Stripe customer and session IDs but never store card numbers or CVVs.

Usage data: Page views, feature usage, timestamps (for rate limiting and service improvement).

Contract performance: Processing your investigation data to deliver the analysis you requested.

Legitimate interest: Service improvement, fraud prevention, rate limiting.

Consent: Marketing communications (opt-in only).

All data is encrypted in transit using TLS 1.3 and at rest using AES-256.

Data is hosted in EU datacenters (Ireland, AWS eu-west-1).

Row Level Security (RLS) ensures each user can only access their own data. No cross-tenant data access is possible.

PDF and PPTX reports are generated client-side in your browser — report content never leaves your device during export.

We use the following third-party services:

• Supabase (AWS, EU — Ireland) — Database, authentication, file storage and serverless functions
• Stripe (US, EU SCCs) — Payment processing
• Resend (EU/US, SCCs) — Transactional and lifecycle email delivery
• Google (EU processing) — AI model inference, analytics and advertising measurement
• Lovable (EU) — Application hosting and delivery

Investigation data: Retained as long as your account is active. Deleted within 30 days of account deletion.

Audit uploads: Immediately deleted after scoring. Only scorecard results are retained.

Payment records: Retained for 7 years for tax compliance (UK HMRC requirements).

Rate limit logs: Automatically purged after 90 days.

You have the right to:

• Access — Request a copy of all your data (Settings → Export)
• Rectification — Update your profile at any time
• Erasure — Delete your account and all data (Settings → Delete Account)
• Portability — Export your data in JSON format
• Restriction — Contact us to restrict processing
• Objection — Object to processing based on legitimate interest

To exercise any right, email privacy@riskopilot.com or use the self-service tools in Settings.

RISKOPILOT uses essential cookies only:

• Authentication session — Required for login functionality
• Language preference — Stores your interface language choice

We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

We may update this policy to reflect changes in our practices or legal requirements. Material changes will be communicated via email to registered users. The "Last updated" date at the top indicates the most recent revision.

For privacy-related enquiries:

HSESKILLS Ltd
Email: privacy@riskopilot.com

If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.