Privacy Policy

Riskpoint Ltd · last updated 8 October 2026

This Privacy Policy explains how Riskpoint Ltd, a company incorporated in Scotland with registration number SC892200 and having its registered office at Suite 2, Ground Floor Orchard Brae House, 30 Queensferry Road, Edinburgh, United Kingdom, EH4 2HS (“Riskpoint”, “we”, “us”), collects, uses and protects information when you use the RiskPoint platform and applications (the “Services”).

INFORMATION WE COLLECT

We collect the account information needed to sign you in (your name and email address through our identity provider), the content you enter into the Services (such as portfolio companies, suppliers and the messages you send to the in-app agent), and the results of the scans and analyses you run. We also collect basic technical information, such as log data, needed to operate and secure the Services.

GOOGLE USER DATA

If you choose to connect your Google Drive, you grant RiskPoint read-only access to your Google Drive (the drive.readonly scope). We use this access solely to let you, through the in-app agent and at your explicit request, search and read your own Google Drive files to answer your questions. We request the minimum access needed for this purpose.

We do not copy or index your Drive. Files are read only when you ask the agent something that needs them. To answer, what the agent reads is sent to the AI model provider that generates the response, and the answer, together with what the agent read, is kept in the chat where you asked, like any other message there: visible to that chat’s participants and deleted with the chat. The authorization token that lets us access your Drive on your behalf is stored encrypted; you can disconnect at any time from your Profile, which deletes that token, and you may also revoke access from your Google Account settings.

Disconnecting stops new access but does not remove what is already in your chats. You can delete any chat you take part in, which deletes everything in it, including what the agent read from your Drive. Deleting your account deletes the portfolios you alone own, with their chats, and your Drive authorization; chats in portfolios you share with others stay with those portfolios unless you delete them first. You can also ask us to delete your Google user data, or any other data of yours, by writing to the address below, and we will delete it.

LIMITED USE OF GOOGLE USER DATA

RiskPoint’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we:

  • use Google user data only to provide or improve the user-facing features described above;
  • do not transfer Google user data to third parties except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition or sale of assets with user notice;
  • do not use Google user data for serving advertisements;
  • do not allow humans to read Google user data unless we have your affirmative agreement for specific files, it is necessary for security purposes (such as investigating abuse), to comply with applicable law, or the data is aggregated and anonymized for internal operations; and
  • do not use Google user data to train generalized or non-personalized AI and/or machine learning models.

HOW WE USE INFORMATION

We use the information we collect to operate, maintain and secure the Services, to provide the features you request, and to respond to your support enquiries. We do not sell your personal information.

DATA SECURITY AND RETENTION

We apply technical and organisational measures appropriate to the risk, including encryption of access tokens at rest and access controls. We retain the information you enter for as long as your account is active or as needed to provide the Services, and we delete it on request subject to our legal obligations.

YOUR RIGHTS

You may access, correct or delete the information associated with your account, disconnect any connected integration, and request that we delete your data, by contacting us at the address below. Where applicable law grants you additional rights over your personal data, we honour them.

CONTACT

For any question about this Privacy Policy or your data, contact us at privacy@riskpoint.ai.