This Privacy Policy explains how Ritelio ("Ritelio", "we", "us") collects, uses, and protects information when you use our website at ritelio.com and the Ritelio Core application at app.ritel.io (together, the "Service"). It should be read together with our Terms & Conditions.
1. Information We Collect
Account information: when you sign up, we collect details such as your name, email address, phone number, and business name.
Business data you enter ("Your Data"): products, transactions, customer records, employee records, and similar content you add while using Ritelio Core. Your Data remains yours, as described in our Terms & Conditions.
Payment information: when you subscribe to a paid plan, payment details are collected and processed directly by our payment partners, including iPaymu, Midtrans, Xendit, DOKU, Stripe, and PayPal. Ritelio does not store your full card or bank account numbers.
Usage data: we automatically collect some technical information, such as IP address, browser type, device information, and pages visited, to keep the Service secure and to understand how it’s used.
Communications: if you contact us through our contact form, email, or WhatsApp, we keep a record of that conversation so we can respond and follow up.
2. How We Use Information
We use the information above to: provide and maintain the Service; process subscriptions and payments; respond to support requests; send service-related communications such as invoices, security alerts, and product updates; improve Ritelio Core; and meet our legal, tax, and accounting obligations.
3. AI Features & Your Data
Some features, such as the AI assistant, receipt scanning (OCR), and sales forecasting, process Your Data through AI providers in order to generate the response you asked for. We do not permit those providers to use Your Data to train general-purpose models that would serve other customers; it is only used to deliver the feature back to you.
4. Sharing Your Information
We share information only where it’s needed to run the Service: with payment processors (iPaymu, Midtrans, Xendit, DOKU, Stripe, PayPal) to process your subscription; with cloud hosting providers who store data on our behalf; with AI providers that power certain features; and with WhatsApp, if you choose to receive notifications there.
We may also disclose information if required by law, regulation, or a valid legal request, or to protect the rights, property, or safety of Ritelio, our users, or others.
We do not sell your personal information or Your Data to third parties.
5. Data Security
Every business using Ritelio Core runs in its own isolated space, enforced at the database level, so one business cannot access another’s data. Financial records are write-protected once posted, data is encrypted in transit, and access to our systems is restricted to what’s needed to operate and support the Service.
6. Data Retention
We keep your information for as long as your account is active. If you close your account, we retain Your Data for a limited period in case you want to reactivate, after which it is deleted, except where we are required to keep certain records for longer to meet Indonesian tax, accounting, or other legal obligations.
7. Your Rights & Choices
You can access and export Your Data from within the application at any time. You can also ask us to correct inaccurate personal information, or to delete your account and associated personal data, subject to the retention obligations described above. Under Indonesia’s Personal Data Protection Law (Law No. 27 of 2022), you have the right to access, correct, and request deletion of your personal data; email hello@ritelio.com to exercise these rights.
8. Cookies & Similar Technologies
ritelio.com currently uses only essential cookies and local storage, for example to remember your language preference; we don’t run third-party advertising or analytics trackers on this site today. The Ritelio Core application at app.ritel.io uses cookies and similar technologies as needed to keep you signed in and to keep the Service secure. If this changes, we will update this Policy.
9. Children’s Privacy
The Service is intended for business owners and their staff, not for children. We do not knowingly collect personal information from children.
10. International Data Transfers
Some of our hosting and AI providers process data outside Indonesia. Where that happens, we take reasonable steps to make sure Your Data is protected to a standard consistent with this Policy and applicable Indonesian law.
11. Changes to This Policy
We may update this Privacy Policy as the Service evolves. We will post the updated Policy here with a new "Last updated" date, and for material changes, we will make a reasonable effort to notify active subscribers.
12. Contact
Questions about this Policy or your data? Reach us at hello@ritelio.com or see our Contact page.