Privacy Policy

Radiqx ("Radiqx", "we", "our", or "us") operates the Radiqx Ledger platform, RDX Planning, ChatRDX, and associated services (the "Services"). This Privacy Policy explains how we collect, use, disclose, and protect information when you use our Services or visit our websites.

1.1 Account and Identity Information

When you create an account or are provisioned as a user by your organization, we collect information such as your name, email address, job title, and organizational affiliation. Authentication is managed through Clerk, our identity provider, which may process this information in accordance with its own privacy policy.

1.2 Customer Data

We process metadata structures, hierarchies, dimensions, change requests, governance workflows, audit records, and other data that you submit to the Services ("Customer Data"). This data is processed solely to provide the Services and is governed primarily by our Data Processing Agreement (DPA) and your subscription agreement.

1.3 Usage and Technical Data

We automatically collect certain technical information when you use the Services, including IP addresses, browser type and version, operating system, access timestamps, pages and features accessed, and error logs. This information is used to operate, maintain, and improve the Services.

1.4 Communications

If you contact us for support, sales inquiries, or other purposes, we retain records of those communications including email content and metadata.

We use the information we collect for the following purposes:

• Service delivery: To provision, operate, maintain, and improve the Services you have subscribed to;
• Authentication and security: To verify identity, prevent unauthorized access, and maintain the security of accounts and data;
• Support: To respond to support requests, diagnose technical issues, and communicate service-related information;
• Billing and accounts: To process payments, manage subscriptions, and maintain account records;
• Legal compliance: To comply with applicable laws, respond to legal process, and enforce our agreements;
• Product improvement: To analyze usage patterns and improve platform functionality, subject to anonymization where possible.

We do not sell Customer Data or personal information to third parties. We do not use Customer Data to train AI models without explicit consent.

3.1 Service Providers

We share information with trusted third-party service providers who assist in operating the Services, subject to contractual obligations that restrict their use of such information. Key sub-processors include:

• Supabase — database infrastructure and storage;
• Vercel — application hosting and edge delivery;
• Clerk — identity and authentication management;
• Anthropic — AI Governance Advisor functionality (processes governance queries; does not retain Customer Data for model training).

3.2 Legal Requirements

We may disclose information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect the rights, property, or safety of Radiqx, our customers, or the public.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, Customer Data and other information may be transferred as part of that transaction, subject to standard confidentiality protections.

We retain Customer Data for the duration of the active subscription term. Upon termination or expiration, Customer Data is made available for export for thirty (30) days, after which it is deleted from production systems within ninety (90) days, subject to backup retention cycles. Anonymized, aggregated usage data may be retained indefinitely for analytics purposes. Account records and billing information are retained as required by applicable law and accounting standards.

We implement appropriate technical and organizational security measures to protect information against unauthorized access, disclosure, alteration, or destruction. Security measures include:

• Encryption of data in transit using TLS 1.2 or higher;
• Encryption of data at rest;
• Post-quantum cryptographic protections for audit ledger integrity (ML-DSA-65, FIPS 203–206);
• Role-based access controls and Row Level Security (RLS) on shared infrastructure;
• Dedicated database instances for enterprise-tier customers;
• Immutable, cryptographically secured audit records for all governance events.

No method of transmission or storage is completely secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections.

Depending on your location, you may have rights regarding your personal information, including:

• Access: The right to request a copy of personal information we hold about you;
• Correction: The right to request correction of inaccurate personal information;
• Deletion: The right to request deletion of your personal information, subject to legal retention obligations;
• Portability: The right to receive your data in a structured, machine-readable format;
• Objection: The right to object to certain processing activities.

To exercise these rights, contact us at privacy@radiqxledger.com. We will respond within thirty (30) days.

Radiqx operates primarily in the United States. If you are located outside the United States, your information may be transferred to and processed in the United States, which may have different data protection laws than your jurisdiction. For customers subject to GDPR, we rely on Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms as applicable. Enterprise customers requiring specific data residency arrangements should contact us to discuss available configurations.

The Services use session cookies and authentication tokens required for platform operation and security. We do not use third-party advertising cookies or tracking pixels. Analytics data collected is used solely for service improvement and is not shared with advertising networks.

We may update this Privacy Policy from time to time. We will notify customers of material changes by email or through the Services at least thirty (30) days before the changes take effect. Continued use of the Services following the effective date of updated terms constitutes acceptance.