Privacy Policy

1. Introduction

Rilk LLC (“Rilk,” “we,” “us,” or “our”) operates the multi-channel inventory management platform available at rilk.ai (the “Service”). This Privacy Policy explains what data we collect, how we use it, who we share it with, and your rights as a seller and data subject.

By creating an account or using the Service, you agree to this Privacy Policy. If you do not agree, do not use the Service.

2. Data We Collect

2.1 Account Data

When you register for Rilk, we collect your name, email address and a password, a mobile phone number when you use our main sign-up form, and your company name if you give it to us. We also store account configuration, feature settings, and subscription tier. If you submit our sign-up form but do not enter the emailed code to finish, we keep your name, email address and phone number so we can contact you about completing your sign-up, and email you about Rilk.

2.2 Marketplace Data

When you connect a marketplace or sales channel, you authorize Rilk to access certain marketplace data on your behalf. This data includes:

• Buyer personal data — buyer name, shipping address and contact details, where the marketplace provides them; used to fulfil, ship and manage your orders
• Orders, listings, inventory, fulfilment and financial data — order details, product and catalog data, inventory and fulfilment status, and settlement and fee data

2.3 Google user data (Gmail, Google Drive and Google Sheets)

When you connect a Google account, you authorize Rilk to access your Gmail and the Google Drive and Google Sheets files that the features you use need. We use this data only to provide the features you turn on: sending and importing your business email, identifying payment information in emails you connect, and exporting your data to spreadsheets you choose. We may use automated tools, including the AI service providers listed in Section 4, to identify payment information in emails you connect.

Limited Use disclosure. Rilk’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Google user data only to provide or improve user-facing features that are prominent in the Service.
• We transfer Google user data only as necessary to provide or improve those features (including to the service providers listed in Section 4), to comply with applicable law, for security purposes, or as part of a merger, acquisition or sale of assets.
• We do not use Google user data for advertising, and we do not sell it.
• We do not use Google user data to develop, improve or train generalized artificial-intelligence or machine-learning models.
• We do not allow humans to read Google user data unless we have your affirmative agreement for specific messages, it is necessary for security purposes such as investigating abuse, it is required to comply with applicable law, or the data has been aggregated and anonymized for internal operations.

2.4 Operational Data

We collect data you enter while using the Service: purchase orders, vendor records, warehouse bin assignments, serial number logs, shipping carrier account credentials, and shipping label history.

2.5 Security & Audit Data

We log authentication events (login attempts, successes, failures) including IP address, browser, operating system, and device type. This data is used for security. We do not use this data for advertising or profiling.

2.6 Technical Data

We collect standard server log data: IP addresses, browser and device information, request paths, timestamps, and error codes. This data is used for monitoring, debugging, and security.

2.7 Public Website Data

On our public pages, advertising and measurement tools collect data about your visit; Section 11 describes them.

2.8 Communications with us

When you contact us by support chat, email or phone, we collect what you send or say, your contact details, and call recordings and transcripts where call recording is enabled. We use this to answer you, to provide support, and to improve our support.

3. How We Use Your Data

We use your data to provide, secure and improve the Service, including to:

• Display your orders, inventory, and financials in the Rilk dashboard
• Create shipping labels with the carrier you choose
• Sync inventory quantities back to your connected marketplaces
• Export data to Google Sheets on your configured schedule — at your explicit instruction
• Provide warehouse, serial number, and picking workflow functionality
• Send you transactional emails (account setup, password reset, shipping confirmations)
• Email you about completing a sign-up you started, and about Rilk; every such email has an unsubscribe link
• Call you about your account or a sign-up you started, for example when a setup step or your first shipping label fails
• Detect and respond to security threats (account lockout, anomaly detection)
• Comply with legal obligations

We do not sell your data. We do not use your account data, your marketplace data, or your buyers’ personal data for advertising, or to build advertising profiles. We share marketplace data only with the service providers in Section 4, and with the marketplaces, carriers and other services you connect or direct us to use.

This section covers the data we hold for your account. Public-website visit data is separate and is described in Section 11.

4. Data Sharing and Sub-Processors

We share data only to operate the Service. The providers below process your business data, such as orders, buyers, products and listings, on our behalf as part of the Service (“sub-processors”):

We share buyer personal data only to run the Service: with the providers in this table that host, carry or process it for us, with the carriers, marketplaces and other services you direct us to use, and with support and AI providers when it appears in something you send us or show us.

We also use providers that receive your account and contact information and what you send or say to us (Section 2.8), but not the business data held in your account: payment processing, business email and productivity tools, internal alerting tools, and phone and voice-assistant services for our sales and support lines.

5. Data Storage and Security

We store data in the United States with Amazon Web Services. We use administrative, technical and organizational safeguards designed to protect it, including encryption in transit and at rest, access controls, and logging of staff access to account data. No method of storing or transmitting data is completely secure.

6. Security Incident Notification

If we confirm a security breach affecting your data, we will notify you without undue delay — within 72 hours of confirmation — by email to your account’s registered contact address. The notification will describe what happened, the categories of data involved, what we have done to contain and remediate the incident, and any steps we recommend you take. Where applicable law requires notice to regulators or other parties, we will provide it on the timeline the law requires.

7. Data Retention

We keep your data while your account is active and after it is closed, unless the law or a marketplace’s terms require us to delete it. You may ask us to delete your data at any time; we will respond within 30 days, and may keep what the law or our agreements with you allow us to keep.

Audit logs and security logs (login history, account lockout events) are retained for at least 12 months.

Buyer personal data received from Amazon is deleted no later than 30 days after the related order is delivered or, if a return of that order is still open when that period ends, no later than 30 days after the return is closed, unless the law requires us to keep it longer.

If you start signing up but don’t finish, we keep the name, email address and phone number you entered so we can follow up with you. You can ask us to delete them at any time by emailing support@rilk.ai.

Public-website visit data collected by the advertising and measurement tools in Section 11 is held by those providers under their own retention practices; Rilk does not store it, beyond the server logs in Section 2.6. The visit and sign-up measurement we record ourselves is kept as described in Section 11.1.

8. Your Rights

Depending on where you live, you may have the right to:

• Access — request a copy of all data we hold about you and your account
• Correction — request that we correct inaccurate data
• Deletion — request deletion of your account and personal data, subject to the retention described in section 7
• Portability — request an export of your data in a machine-readable format
• Revoke OAuth Access — disconnect any marketplace or Google account at any time from your Rilk settings; Rilk will stop accessing that service

To exercise any of these rights, contact us at support@rilk.ai. We will respond within 30 days.

If you are a buyer or other customer of a business that uses Rilk, please contact that business. We process your data on its behalf and will pass your request to it.

9. Amazon Selling Partner API Data

When you authorize Rilk through Amazon, we use the Amazon data we receive only to provide the Service to you as the authorized seller. We do not use it for advertising or marketing, and we do not sell it. We share buyer personal data only as needed to provide the Service at your direction, for example with the carrier you choose when you create a label, and we delete it as described in Section 7. You may revoke our access at any time in Amazon Seller Central.

10. Google API Data Usage

Section 2.3 describes how we use and protect Google user data, including our Limited Use commitments. You may revoke Rilk’s access at any time from your Rilk email settings or from your Google Account permissions page.

“Google data” in this section means Google user data obtained through Google APIs — Gmail, Sheets and Drive. The Google Ads conversion tracking described in Section 11 is a separate Google product that runs only on our public marketing pages; it never receives Google user data, and nothing in this section is changed by it.

10.1 How we protect Google user data

We treat Google user data as sensitive. We encrypt it in transit and at rest, keep it in access-controlled systems in the United States, make it available only to the account that connected it and to personnel who need it as described in Section 2.3, and apply additional encryption to the access tokens Google issues to us. When you remove a connected mailbox, we stop accessing it and delete the access tokens we hold for it. Email content already imported into your account is kept with your account data as described in Section 7 and is deleted on request. We assess our security regularly.

11. Cookies and Website Advertising

Rilk uses cookies needed to keep you signed in and remember your preferences. Inside the Service (every page you reach after signing in) we use no advertising cookies, tracking pixels or cross-site analytics.

On our public website, including our sign-up page and free tools, we use advertising and measurement tools from Meta and Google, and a review badge from SourceForge (Slashdot Media). They may receive your IP address, browser and device information, the pages you visit and the page that referred you, and their own cookie identifiers. We use them to measure our advertising, and Meta’s to show our ads to people who have visited our site. We do not send them anything you type into our forms, and they never receive account, marketplace, Google-account, buyer or order data, which is why they are not in Section 4.

You can limit this through Meta’s ad settings, Google’s Ad Settings, your browser’s cookie settings or a tracker-blocking extension, or by emailing support@rilk.ai. These choices do not affect your access to the Service. We do not sell personal information for money. Our website does not currently respond to Do Not Track or Global Privacy Control signals.

11.1 Our own measurement

On our public website, and on private onboarding-plan pages we share with business customers, we record visits and how pages are used, including IP address, approximate location, browser and device type, campaign and ad-click tags, and on-page activity. We use this only to measure which pages and ads lead to sign-ups and paying accounts, and whether a shared plan has been reviewed. We do not send it to advertising services. Records not linked to an account are deleted after 90 days; records linked to an account are kept as described in Section 7.

12. Children’s Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have collected data from a minor, contact us immediately at support@rilk.ai.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top and, for material changes, notify you by email or in-app notification. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

14. Contact Us

For questions about this Privacy Policy or to exercise your rights:

Email: support@rilk.ai

Website: https://rilk.ai