Privacy Policy

Rizqo (“Rizqo,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information we collect through our websites, applications, products, and services.

This Privacy Policy explains what information we collect, how we use and protect it, when we disclose it, and the choices and rights available to you. This Privacy Policy applies to getrizqo.com, other websites or online services that link to this Privacy Policy, and the Rizqo application and related services (collectively, the “Services”).

By using the Services, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

The information we collect depends on how you interact with Rizqo.

1.1 Information You Provide to Us

We may collect information you provide directly to us, including:

• Account information, such as your name, work email address, password, company name, job title, and account preferences.
• Contact information, such as your email address, telephone number, and other information you provide when contacting us.
• Business information, such as your company name, business address, industry, and information about your organization.
• Transaction and billing information, such as subscription information, billing details, invoices, and payment status. Payment card information may be collected and processed directly by our payment service providers rather than stored by Rizqo.
• Support and communications information, including information you provide when requesting support, submitting feedback, responding to surveys, or communicating with us.
• Information submitted through forms, such as information provided when requesting a demonstration, joining a waitlist, signing up for an account, or otherwise interacting with the Services.

We only request information that is reasonably necessary for the relevant purpose.

1.2 Information You or Your Organization Enter Into Rizqo

Rizqo is a business management platform for architecture firms and other project-based professional service businesses.

Depending on how your organization uses Rizqo, the Services may allow users to enter or upload information relating to:

• clients and contacts;
• projects;
• project phases and tasks;
• employees, team members, and contractors;
• time entries;
• proposals;
• contracts;
• invoices;
• payments;
• project financial information;
• project performance and profitability information; and
• other business information entered by an authorized user.

This information may contain personal information relating to individuals who are not direct Rizqo users. Where a Rizqo customer uses the Services to process this type of information, the customer generally determines what information is entered into Rizqo and why it is processed. In that context, Rizqo processes the information on the customer's behalf and according to the customer's instructions and applicable agreements. If you are an employee, contractor, client, or other individual whose information has been entered into Rizqo by one of our customers, your privacy questions or requests concerning that information should generally be directed to the organization that uses Rizqo.

1.3 Information We Collect Automatically

When you access or use the Services, we may automatically collect certain technical and usage information, such as:

• IP address;
• browser type and version;
• operating system;
• device type;
• referring and exit pages;
• pages or features viewed;
• dates and times of access;
• approximate location derived from IP address;
• interactions with the Services;
• error and diagnostic information; and
• information about how you use and navigate the Services.

We use this information to operate, secure, maintain, analyze, and improve the Services.

1.4 Cookies and Similar Technologies

Rizqo may use cookies, local storage, pixels, SDKs, and similar technologies to:

• keep users signed in;
• maintain sessions and preferences;
• provide security and prevent fraud;
• understand how the Services are used;
• measure website and product performance;
• remember settings; and
• support other functionality described in this Privacy Policy.

Some cookies may be provided by third-party service providers acting on our behalf. The marketing website uses the booking and optional analytics features described in Section 17, Website booking and analytics update of October 15 2026. Where required by applicable law, we will obtain consent before using non-essential cookies or similar technologies.

You may be able to control cookies through your browser settings or through cookie-management tools we provide. Disabling certain cookies may affect the functionality of the Services.

2. How We Use Information

We may use personal information for the following purposes:

Providing the Services

We use information to:

• create and manage accounts;
• authenticate users;
• provide access to Rizqo;
• provide customer support;
• process transactions and subscriptions;
• provide requested features and functionality;
• maintain customer and account records; and
• otherwise provide the Services.

Operating and Improving Rizqo

We may use information to:

• understand how users interact with the Services;
• troubleshoot problems;
• monitor performance;
• develop new features;
• improve usability;
• conduct analytics;
• test and improve our systems; and
• maintain the reliability of the Services.

Security and Fraud Prevention

We may process information to:

• protect accounts;
• detect and prevent fraud, abuse, unauthorized access, and other security incidents;
• investigate suspicious activity;
• enforce our terms and policies; and
• protect the rights, property, and safety of Rizqo, our customers, users, and others.

Communications

We may use your information to:

• send service-related communications;
• respond to inquiries;
• provide important account or security notifications;
• send information about changes to the Services; and
• where permitted by law, send marketing communications.

You can unsubscribe from marketing communications at any time by using the unsubscribe mechanism included in those communications.

Legal and Compliance Purposes

We may use information when reasonably necessary to:

• comply with applicable laws and regulations;
• respond to lawful requests from governmental authorities;
• establish, exercise, or defend legal claims;
• enforce agreements;
• prevent harm, fraud, or abuse; or
• protect the rights, safety, and property of Rizqo and others.

3. How We Share Information

We do not disclose personal information indiscriminately. We may disclose information in the following circumstances.

Service Providers

We may disclose information to third-party companies and individuals that provide services on our behalf, such as:

• cloud hosting and infrastructure;
• authentication and security;
• payment processing;
• analytics;
• customer support;
• communications;
• email delivery;
• error monitoring;
• data storage and backup; and
• other technology or business services.

These providers are permitted to process information only as reasonably necessary to provide services to Rizqo or as otherwise permitted by applicable agreements and law.

Payments

Rizqo may use third-party payment processors to process subscription and payment transactions.

For example, subscription payments may be processed through Paddle or another payment provider we designate.

Payment processors may collect and process payment and transaction information under their own privacy policies and terms.

Rizqo does not need to store your complete payment card number in order to provide the Services.

Customer-Directed Sharing

If you use Rizqo through an organization, information you enter into the Services may be accessible to administrators and other authorized users within that organization according to the organization's account configuration and permissions.

Legal Requirements

We may disclose information when we reasonably believe disclosure is necessary to:

• comply with applicable law;
• respond to a valid legal process;
• comply with a court order, subpoena, or governmental request;
• investigate fraud or security issues;
• enforce our agreements; or
• protect the rights, safety, or property of Rizqo, our users, or others.

Business Transfers

If Rizqo is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar corporate transaction, personal information may be transferred as part of that transaction, subject to applicable law.

We will take reasonable steps to ensure that any successor handles personal information consistently with this Privacy Policy or provides legally required notice.

With Your Direction or Consent

We may disclose information when you direct us to do so or otherwise provide your consent.

4. We Do Not Sell Personal Information

Rizqo does not sell personal information for monetary consideration.

We also do not knowingly disclose personal information for cross-context behavioral advertising unless our practices change and applicable law requires us to provide you with an opportunity to opt out. If our data practices change in a manner that constitutes a “sale,” “sharing,” or targeted advertising under an applicable privacy law, we will update this Privacy Policy and provide any legally required notices and choices.

5. Data Retention

We retain personal information for as long as reasonably necessary to:

• provide the Services;
• maintain your account;
• fulfill the purposes described in this Privacy Policy;
• comply with legal, accounting, or reporting obligations;
• resolve disputes;
• enforce agreements; and
• protect our legitimate business and security interests.

Retention periods vary depending on the type of information and the circumstances in which it was collected. When personal information is no longer reasonably necessary for these purposes, we will delete it, anonymize it, or securely isolate it, subject to applicable legal, contractual, security, and operational requirements.

For information processed on behalf of a Rizqo customer, retention may also be governed by the customer's instructions and applicable customer agreement.

6. Data Security

We take reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, destruction, and other forms of misuse.

Depending on the nature of the information and the Services involved, these measures may include access controls, authentication mechanisms, encryption in transit, logging and monitoring, backups, and other security safeguards. However, no method of transmitting or storing information over the internet is completely secure. Accordingly, we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials and for ensuring that access to your account is appropriately controlled.

If you believe your Rizqo account or information has been compromised, please contact us promptly.

7. Your Privacy Rights

Depending on where you live and subject to applicable legal limitations and exemptions, you may have rights regarding your personal information.

These rights may include the right to:

• know or access the personal information we process about you;
• obtain information about how your personal information is collected and used;
• request correction of inaccurate personal information;
• request deletion of personal information;
• obtain a copy of certain personal information;
• opt out of certain processing activities, including targeted advertising or the sale of personal information where applicable;
• limit certain uses of sensitive personal information where applicable;
• appeal our decision concerning a privacy request; and
• receive equal treatment for exercising applicable privacy rights.

These rights are not absolute. Applicable law may permit or require us to retain or continue processing certain information, and certain information may be exempt from particular privacy rights.

How to Submit a Privacy Request

You may submit a privacy request by contacting us at: privacy@getrizqo.com

Please include enough information for us to understand and process your request.

We may need to verify your identity before completing certain requests. We will only request information reasonably necessary for verification and will use that information for the purpose of processing and securing your request. If you have an account with Rizqo, we may ask you to submit the request through your existing account or another secure method.

Where required by applicable law, you may use an authorized agent to submit a request on your behalf.

Appeals

If applicable law gives you a right to appeal our decision concerning a privacy request, you may submit an appeal by contacting: privacy@getrizqo.com

Please identify the original request and explain why you believe our decision should be reconsidered.

We will review and respond to appeals within the period required by applicable law.

8. California Privacy Rights

This section applies to California residents to the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), applies to Rizqo's processing of their personal information.

California residents may have rights to:

• know what categories and specific pieces of personal information Rizqo collects, uses, discloses, or otherwise processes;
• request deletion of personal information, subject to applicable exceptions;
• request correction of inaccurate personal information;
• opt out of the sale or sharing of personal information;
• limit certain uses and disclosures of sensitive personal information;
• receive information about the categories of personal information collected, the purposes for collection, the categories of sources, and the categories of third parties to whom information is disclosed; and
• not be discriminated against for exercising applicable privacy rights.

Rizqo does not sell personal information for monetary consideration.

Rizqo does not knowingly share personal information for cross-context behavioral advertising.

If this changes, we will provide the notices and opt-out mechanisms required by applicable California law.

California residents may submit requests using:

Email: privacy@getrizqo.com

We will process requests in accordance with applicable California law, including applicable identity-verification, response-time, and exemption requirements.

9. State Privacy Laws

Other U.S. states provide privacy rights that may apply depending on your residency and whether Rizqo is subject to the applicable law.

These laws may include privacy statutes in states such as Virginia, Colorado, Connecticut, Utah, Iowa, Indiana, Tennessee, Texas, Oregon, Montana, Delaware, New Jersey, New Hampshire, Kentucky, Nebraska, Maryland, Minnesota, Rhode Island, and others. Where an applicable state privacy law grants you rights beyond those described elsewhere in this Privacy Policy, Rizqo will honor those rights as required by law.

Depending on the applicable state law, these rights may include rights to access, delete, correct, obtain, or port personal information, and to opt out of certain forms of processing. We will also honor legally recognized opt-out preference signals, such as the Global Privacy Control (“GPC”), where required by applicable law and to the extent the signal applies to Rizqo's processing.

10. Children's Privacy

Rizqo is a business-to-business service and is not directed to children.

We do not knowingly collect personal information from children under 13 through the Services.

If you believe that a child under 13 has provided personal information to Rizqo, please contact us at privacy@getrizqo.com.

If we learn that we have collected personal information from a child under 13 without legally required authorization, we will take reasonable steps to delete that information.

11. International Users

Rizqo is operated from India by Re-solve.co, a sole proprietorship owned by Altaf Nadaf, and may be accessed by customers located in other countries.

Wherever you access the Services from, you understand that your information may be transferred to, stored in, and processed in India and in other countries where Rizqo or its service providers operate.

Privacy and data-protection laws in those countries may differ from the laws of your country. If Rizqo becomes subject to additional international privacy requirements, including requirements applicable to users in the European Economic Area, United Kingdom, or other jurisdictions, we may provide additional notices or contractual terms as required by applicable law.

12. Third-Party Services and Links

The Services may contain links to websites, applications, or services operated by third parties.

Rizqo is not responsible for the privacy practices, security, or content of third-party services.

We encourage you to review the privacy policies of third parties before providing them with personal information.

13. Do Not Track

Some web browsers provide a “Do Not Track” (“DNT”) signal.

There is currently no universally accepted standard for responding to DNT signals.

Where required by applicable law, Rizqo will honor legally recognized browser-based opt-out preference signals, including the Global Privacy Control, in accordance with applicable requirements.

14. Business Data and Customer Responsibilities

Rizqo is designed for business use.

If you use Rizqo on behalf of an organization, you are responsible for ensuring that you have the appropriate rights, notices, consents, and legal authority to provide personal information to Rizqo and to instruct us to process that information.

Customers should not use Rizqo to collect or process personal information in violation of applicable law or their own privacy obligations. Where appropriate, Rizqo may enter into a separate Data Processing Agreement (“DPA”) with customers governing personal information processed by Rizqo on their behalf.

In the event of a conflict between this Privacy Policy and a separate agreement governing the processing of customer data, the applicable agreement will control to the extent required by that agreement and applicable law.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, business practices, technology, or legal requirements.

When we make changes, we will update the “Last Updated” date at the top of this Privacy Policy.

If we make material changes, we may provide additional notice where required by applicable law, such as by posting a prominent notice on our website or notifying affected users through their account or email address. Your continued use of the Services after an updated Privacy Policy becomes effective constitutes acknowledgment of the updated policy, except where applicable law requires additional consent.

16. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or Rizqo's privacy practices, please contact us:

Rizqo

Email: privacy@getrizqo.com

Website: getrizqo.com

We encourage you to contact us first with any privacy concern so that we can attempt to address it directly.

17. Website booking and analytics update of October 15 2026

This section describes the marketing website's current booking and measurement features. It replaces the earlier marketing-website description that referred only to Cloudflare Web Analytics and said that only a theme preference and cookie-notice response were stored in the browser. The other sections of this Privacy Policy continue to apply.

Optional website analytics

Website analytics are optional and are enabled only when you consent. If you decline, or your browser sends a Do Not Track or Global Privacy Control signal, we do not enable this optional tracking. You can change your choice using Cookie preferences. The consent choice itself is saved in local storage so the website can remember it.

When you consent, we use session storage for an anonymous session identifier and first-touch attribution. This attribution is limited to the landing-page path, referring domain and permitted campaign parameters. We store first-party analytics events in Cloudflare D1 for up to 90 days. We do not persist raw URL query strings, form contents or IP addresses in analytics records.

Demo bookings and follow-up

You can book a demo without consenting to analytics. To schedule and manage the appointment and follow up on your product inquiry, we collect your full name, email address, practice information, practice size, current tool, selected topic, timezone and appointment time. The booking interface uses essential session storage to remember your selected timezone and private booking-management token within the browser session. Booking and lead records are retained for up to two years after the appointment, subject to the other retention requirements described in this policy.

We use Resend to deliver transactional booking and account-access emails from our validated mail.getrizqo.com sending domain. Replies to product and booking correspondence go to hello@getrizqo.com. Requesting a demo does not by itself subscribe you to a marketing newsletter.

Administration and abuse prevention

The administrative dashboard uses a secure authentication cookie with a 12-hour lifetime. Sign-in links expire after 15 minutes. For rate limiting and abuse prevention, the service uses keyed HMAC hashes derived from IP addresses; it does not store the raw IP address in those rate-limit records.

For questions or requests about these records, contact privacy@getrizqo.com.