Privacy Policy

1. Who we are

risorahr HR Solutions SAS ("risorahr", "we", "us", "our") is a software company providing an HR compliance and workforce analytics platform. Our registered office is at 19 Rue de la Paix, 75002 Paris, France.

For the purposes of the EU General Data Protection Regulation (GDPR) and applicable national data protection laws, risorahr acts as the data controller for data collected through our website and as a data processor for employee data our customers upload into the risorahr platform.

2. Data we collect

2.1 Website visitors

When you visit risorahr.com, we may collect:

• Usage data (pages visited, time on site, referral source) — via analytics cookies, with your consent
• IP address and browser/device information — for security and fraud prevention
• Contact details (name, email, company) — only when you submit a form

2.2 Platform customers

When you use the risorahr platform, we collect account data (name, email, role), billing information, and usage logs. Employee data uploaded by customers (names, salaries, roles, departments) is processed on behalf of the customer as data processor.

2.3 Data we do NOT collect

We do not collect special categories of personal data (racial origin, health data, political opinions, etc.) through our website. Our platform may process such data only at the explicit instruction of the customer and under a separate Data Processing Agreement.

3. How we use your data

• To provide and improve the risorahr platform
• To respond to enquiries and support requests
• To send product updates and compliance news (with your consent)
• To analyse how the website is used (with your consent)
• To comply with legal obligations (e.g., tax, anti-fraud)
• To enforce our Terms of Service

4. Legal basis for processing

• Consent — analytics cookies, marketing emails
• Contract performance — providing the platform to paying customers
• Legitimate interests — fraud prevention, security, product improvement
• Legal obligation — tax records, responding to court orders

5. Who we share data with

We do not sell your personal data. We share data only with:

• Infrastructure providers — cloud hosting (EU data centres only)
• Analytics providers — Google Analytics (with IP anonymisation, on consent only)
• Payment processors — Stripe Inc. (PCI-DSS compliant)
• Legal authorities — where required by law

All third-party processors are bound by GDPR-compliant Data Processing Agreements.

6. How long we keep data

• Account data: retained for the duration of the contract, then deleted within 30 days of cancellation
• Contact form data: 24 months from submission
• Analytics data: as per Google Analytics retention settings (default 14 months)
• Invoice/billing records: 10 years (French legal requirement)

7. Your rights

Under GDPR, you have the following rights:

• Access — request a copy of the data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interests
• Restriction — request that we limit how we process your data
• Withdraw consent — at any time, for processing based on consent

To exercise any of these rights, email privacy@risorahr.com. We respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority (e.g., CNIL in France).

8. Cookies

8.1 Essential cookies

These cookies are necessary for the website to function and cannot be disabled. They do not store any personally identifiable information.

8.2 Analytics cookies

We use Google Analytics (via Google Tag Manager) to understand how visitors use our site. These cookies are only set after you give consent via our cookie banner. You can withdraw consent at any time using the "Cookie preferences" link in the footer.

8.3 Managing cookies

You can manage your cookie preferences at any time by clicking Cookie preferences in the footer. You can also clear cookies in your browser settings.

9. Security

We use industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, access controls, and regular security reviews. Our infrastructure is hosted in EU data centres. Despite our efforts, no system is 100% secure — if you believe your account has been compromised, contact security@risorahr.com immediately.

10. Contact & Data Protection Officer

For any privacy-related questions or to exercise your rights:

• Email: privacy@risorahr.com
• Post: risorahr HR Solutions SAS, 19 Rue de la Paix, 75002 Paris, France
• DPO contact: dpo@risorahr.com

We may update this Privacy Policy from time to time. Significant changes will be communicated by email to registered users. The "Last updated" date at the top of this page reflects the most recent revision.