Privacy Policy

Who we are

Rinox provides an AI-assisted integration code generator for security teams. This policy describes how we handle data collected through rinox.io.

What we collect

• Account data: email address, hashed password, role and company supplied during onboarding.
• Generation data: the prompts you submit, the platforms you select, and the code we generate in response.
• Contact data: messages you send via the contact form (name, business email, company, role, use case, optional phone, referral source).
• Usage data: coarse request metadata (timestamps, IP-derived hash, user agent) for abuse prevention.
• Uploaded documentation: API specifications you upload for review (PDF or URL contents).

Why we collect it

To operate the service (deliver generations, authenticate sessions, prevent abuse), to communicate with you (contact form replies, transactional email), and to improve generation quality (aggregate quality signals, never used to train external models).

Retention

Generation records are retained for up to 30 days. Contact submissions are retained while your inquiry is active and for a reasonable period afterwards for audit purposes. Account records persist for the lifetime of the account; on deletion request, account records are removed and associated generations are irreversibly anonymised.

Third parties

See the security page for our sub-processors. We do not sell personal data and do not share it with third parties for marketing.

Your rights

Under GDPR and similar regulations, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data (the "right to be forgotten").
• Export your data in a portable format.
• Restrict or object to specific processing activities.
• Lodge a complaint with your local supervisory authority.

Exercise any of these rights by reaching us through the contact form.

International transfers

Data may be processed in jurisdictions outside your country of residence. Where required, transfers rely on Standard Contractual Clauses or another lawful basis recognised under applicable data protection law.

Changes to this policy

Material changes will be announced via email to account holders and reflected in the "last updated" date above.

Contact

For privacy questions, reach us through the contact form.