What we collect, and what we don’t

Who is responsible

RIA Labs is a product of Saffron Dynamics, which is the controller of the personal data described here. For anything on this page, including a request to delete your data, write to info@ria-labs.com.

What the form collects

The form on the demo page asks for your name, work email and company, and offers optional choices for the kind of target, the mode you want and the tier you are interested in. There is a free text field for anything else you want to tell us.

Please do not put credentials, API keys or personal data about other people into that field. If you need to share access details for a scan, that happens under the engagement agreement, not through a web form.

Where it goes

The form posts to a small service of ours hosted on Render, which forwards it by email through Resend to our mailbox at Microsoft 365. It is not written to any database, and there is no third party we sell or rent it to.

Two things are recorded that are worth naming, because “we store nothing” would be too neat. When a submission is sent, our service writes the company name and email address to its own operational log, and when a spam submission is blocked it writes the sender’s IP address. Those logs live with our hosting provider and are kept for a short period. Your IP address is also held in memory for up to ten minutes so the form can rate-limit spam bursts; it is not stored beyond that.

Why we are allowed to hold it

You asked us to get in touch, so we process your enquiry to do that and to arrange a scan if you want one. Under the UK and EU GDPR that is a legitimate interest, and for anything that follows a signed agreement it is performance of a contract at your request. You can object at any time by replying to us and asking us to stop.

How long we keep it

Enquiries stay in our mailbox while the conversation is live and for as long as we may reasonably need them afterwards — to honour a quote, or because a scan is scheduled. Ask us to delete your enquiry and we will, and we will confirm when it is done.

Analytics and cookies

This site sets no cookies and runs no analytics. Nothing here profiles you, follows you between sites, or feeds an advertising network. Fonts are served from this domain rather than a third party, so loading a page does not tell anyone else that you did.

If that changes we will say so here before it does, and any measurement we add will be aggregate and cookieless.

Your source code is a separate matter

Nothing on this page covers testing. What happens to your code, your traffic and the findings during an engagement is governed by the agreement you sign, and it is described on the engagement page. In short: a copy of your source goes into a container that is destroyed when the test ends, it goes to the model you choose, and nothing you send is used to train it.

Your rights

You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to us holding it at all. Write to info@ria-labs.com and we will answer within one month. If you think we have handled your data badly you can complain to your data protection authority — in the UK that is the Information Commissioner’s Office, and in the EU it is the supervisory authority where you live.

Children

This is a tool sold to companies. It is not intended for anyone under 16, and we do not knowingly collect their data.