Legal

Privacy policy

Riyalabs designs, builds, and operates AI co-workers for real business workflows — under human approval, on your existing data and existing tools. This page explains, in plain language, what data Riyalabs collects from visitors to riyalabs.ai and from customers who engage us, how we handle it, where it lives, and the rights you have over it.

Effective: February 15, 2026 · Last updated: October 31, 2026

1. Who we are

Riyalabs ("Riyalabs", "we", "us", "our") is an AI co-worker company with offices in Wilmington, Delaware, United States, and Jaipur, Rajasthan, India. We are the data controller for the data described in this policy.

Contact for any privacy question, request, or complaint:

2. The short version

If you don't want to read the whole document, here are the four things that matter:

• We collect only the data we need to answer your inquiry, run an assessment, or operate the AI co-worker we built for you.
• Your business data stays on the tools and stores you already use. Riyalabs orchestrates access — we don't build a parallel data lake.
• We do not sell, rent, or share your data with data brokers, and we run no advertising trackers. We do use Google Analytics to measure aggregate site traffic — you can opt out at any time.
• You can ask us at any time to see what we hold, correct it, or delete it. Email info@riyalabs.ai. We respond within five business days.

3. What we collect

3.1 When you visit riyalabs.ai

• Server logs — your IP address, user-agent string, the page you requested, and the timestamp. Used for security, debugging, and rate-limiting. Retained for 30 days, then deleted.

Google Analytics 4 — we use Google Analytics to understand aggregate traffic: how many people visit, which pages they read, what device they use, and where they arrive from. To do this it sets cookies on your device and processes your IP address, browser/device information, pages viewed, and approximate (city-level) location. Google acts as our processor for this data. We have not enabled Google's advertising features, Google Signals, or any cross-site ad targeting; we run no advertising pixels; and we do not sell your data. You can opt out via the cookie banner on this site, your browser's cookie controls, or Google's opt-out add-on at tools.google.com/dlpage/gaoptout. We place no other non-essential cookies.

3.2 When you book a workflow assessment

Our "Book a workflow assessment" link hands you off to Microsoft Bookings, a third-party scheduling service. There you choose a time and provide your name, work email, company, and an optional note. Riyalabs receives that information from Microsoft so we can prepare for and attend the meeting. Your interaction with Microsoft is also governed by Microsoft's own privacy statement.

3.3 When you apply for a job

If you apply for a role listed on our Careers page, you apply by emailing info@riyalabs.ai. Your email, including your name, contact details, CV and anything else you choose to send, is stored in our mailbox, which is hosted by Microsoft. We use it only to consider your application and to contact you about it.

3.4 When you email us

Anything you send to info@riyalabs.ai — including the message body, attachments, and the email headers — is stored in our mailbox so we can reply and follow up. We keep these conversations for as long as the relationship is active and for a reasonable archival window after.

3.5 When you engage Riyalabs as a customer

If your organization signs an engagement with us to design, build, or operate an AI co-worker, the specific data we process on your behalf is governed by the Master Services Agreement and Data Processing Addendum signed at engagement, not by this public policy. In every engagement model:

• The co-worker operates on the data sources and SaaS tools you already use — for example Salesforce, HubSpot, Snowflake, Slack, Notion, GitHub, Zendesk, Looker, Google Sheets, Jira, Confluence, and PagerDuty. We connect to those sources under credentials you provision.
• Every material action proposed by the co-worker requires a human approval gate before it has any external effect, per our default operating model.
• We maintain an audit trail of approvals, refusals, and actions taken on your behalf, retained for the duration of the engagement and a reasonable post-engagement window for dispute resolution.
• Depending on the deployment model you choose, the co-worker may run on infrastructure Riyalabs operates, on shared infrastructure, or entirely inside your own environment. The location of the workload is documented in the engagement.

4. How we use it

• To respond to your inquiry — reply to an email, attend a booked workflow assessment, scope an engagement.
• To deliver the engagement you contracted us for — design, build, and operate the AI co-worker, within the scope and the approval gates in the engagement.
• To operate, secure, and improve the riyalabs.ai site and our internal systems — debug errors, prevent abuse, enforce rate limits.
• To contact you about an active engagement, a security matter, or material changes to this policy.
• To comply with the law when we are required to.

We do not use your business data, customer data, or message content to train any generative AI model that benefits anyone other than you. We do not sell, rent, or share your data with data brokers.

5. Where data lives, and how it is protected

Riyalabs corporate systems — the riyalabs.ai site, our mailbox, our internal tooling — are operated by us on infrastructure located in the United States. Data is encrypted in transit using TLS 1.2 or higher. Production-system access is limited to authorized Riyalabs personnel and is gated by SSH key authentication.

For customer engagements, the security posture, hosting region, key-management, and incident-response terms are set out explicitly in the engagement contract and DPA — including the case where the co-worker runs entirely inside the customer's own environment.

No system is perfectly secure. If we ever discover a breach affecting your personal data, we will notify you by email without undue delay and within 72 hours of confirmation where required by law.

6. Who we share data with

We share data only with the parties below, and only as needed:

• Microsoft — powers the workflow-assessment booking flow (Microsoft Bookings) and hosts our email, including job applications sent to us. Receives the information you submit in the booking form.
• Hostinger — hosts riyalabs.ai. Processes data at rest on infrastructure they operate, under their terms.
• Google (Google Analytics) — receives aggregate analytics data (pages viewed, device type, approximate location) so we can measure site traffic. Google acts as our processor; we have not enabled its advertising features. Governed by Google's privacy policy.
• The data sources and tools you connect — in a customer engagement, the co-worker reads from and writes to systems you nominate. Those systems remain governed by your own contracts with their providers.
• Law enforcement or courts — only when we receive a valid legal request, and only the minimum data required.

We do not sell personal data. We have never sold personal data.

7. How long we keep it

• Server logs — 30 days, then deleted.
• Job applications — kept while we consider your application and for a reasonable period afterwards, unless you ask us to delete them sooner.
• Workflow-assessment bookings and related emails — kept while the relationship is active and for a reasonable archival window after, unless you ask us to delete them sooner.
• Customer engagement data and audit trails — for the term of the engagement plus the post-engagement period defined in the MSA / DPA, typically tied to dispute-resolution windows.
• Billing and accounting records — seven years, to meet US tax-record obligations.

8. Your rights

Regardless of where you live, you can ask us at any time to:

• See what data we hold about you.
• Correct anything that's wrong.
• Delete your records, subject to legal retention obligations.
• Export your data in a portable format.
• Withdraw consent for a specific processing activity where consent is the legal basis.

To exercise any of these, email info@riyalabs.ai from the address on file with us. We respond within five business days and complete the request within 30 days.

If you are in the European Economic Area, the UK, or Switzerland, you also have the right to lodge a complaint with your local data-protection authority. If you are in California, you have the rights granted by the CCPA, including the right to know what we collect and the right to delete; we do not sell your information.

9. Children

Riyalabs is built for businesses. The service is not directed to children under 16, and we do not knowingly collect data from anyone under 16. If you believe a child has given us data, email info@riyalabs.ai and we will delete it.

10. Changes to this policy

If we make a material change to this policy, we will note the new effective date at the top of this page, and — where we have an active engagement or open inquiry — we will email you at the address on file at least 14 days before the change takes effect. Minor wording or formatting changes can be made without notice.

11. Contact

For any privacy question, data request, or complaint: