Each workspace's data is isolated at the database level, so one workspace can never read another's records. Role permissions are enforced there too, not only in the interface.
Data is encrypted in transit. Uploaded files are held in per-workspace storage with the same isolation rules.
For what personal information Rizqo collects and how long it is kept, see the Privacy Policy. For the terms covering your use of the product, see the Terms of Service.