Privacy Policy

1. Information we collect

We may collect account and contact information provided directly, product usage and security information generated through use of the service, and information submitted through website forms.

For partner referrals, we preserve the referral code and a random first-party visitor identifier. With analytics permission, we also record pages visited, session activity, browser and device category, language, timezone and general location. Network addresses and user-agent strings are cryptographically hashed rather than shown to partners.

2. How information is used

Information may be used to provide and support the service, secure accounts, respond to requests, improve authorised workflows and meet legal obligations.

Confidential form content is not used for advertising analytics.

Riyale platform administrators can see account contact details, verification and setup status, ECCMIS connection status, and sampled last activity to assist users. Passwords, verification codes, ECCMIS credentials and legal-file contents are not collected by product analytics.

We automatically count public page views, signup/setup form starts, signup-link clicks and generic browser errors in daily anonymous buckets. These counters store no user, firm, visitor or session identifiers, network address, device fingerprint, raw URL, form value or individual event trail. Source categories and our two named launch campaigns are allowlisted; other campaign names are reduced to Other. These totals are activity counts, not unique people or confirmed conversions.

With analytics permission, first-party events measure page categories, signup starts, campaign sources, device categories and return visits. Event-level history is retained for 90 days. A random first-party visitor cookie connects consented website visits to signup; it is not a cross-site advertising identifier.

If configured, Google Analytics measures the public website only after consent. Riyale does not send account contact details or private legal-workspace activity to Google Analytics. You can withdraw optional analytics permission in Cookie Preferences.

With separate advertising measurement permission, Meta measures ad effectiveness, completed account registrations and submitted demo requests. It receives IP address, browser details, advertising click and browser identifiers, anonymous event identifiers and generic page or outcome categories. It does not receive names, email addresses, phone numbers, submitted form fields, legal files, ECCMIS information, or data received from Google or Microsoft accounts.

Meta browser measurement runs in a separate measurement frame on the public website hostname. Its browser code does not run in the private legal workspace, and private application URLs or record identifiers are not sent to Meta. Consent for website analytics does not grant permission for Meta measurement; either permission can be withdrawn in Cookie Preferences.

3. Client and matter data

The law firm controls the legal information it places in Riyale. Users should follow their firm’s confidentiality, retention and access policies.

A final Data Processing Addendum should describe roles, instructions, safeguards and approved subprocessors.

4. Google and Microsoft account data

If you choose “Continue with Google” or “Continue with Microsoft”, we receive your name, email address and an account identifier from that provider. We use them only to sign you in and to link the sign-in to your Riyale account. We do not receive or store your Google or Microsoft password.

If you connect your Google Calendar or Microsoft Outlook calendar, Riyale creates one separate calendar named “Riyale diary” in your account and adds, updates and removes events in that calendar only: the hearings, tasks and appointments from your Riyale diary. With Google we request only the permission to manage calendars that Riyale itself creates, so we cannot read or change your other calendars or events.

Access tokens are stored encrypted and used only to keep that calendar up to date. We do not use Google or Microsoft data for advertising, do not sell it, do not use it to train artificial intelligence models, and do not share it with anyone except as needed to provide this feature, for security, or where the law requires it. Our staff cannot read it except with your permission for support, for security, or where the law requires it.

Riyale Legal Suite’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect at any time from Connections in Riyale, which stops all updates and, if you choose, deletes the Riyale diary calendar. You can also remove Riyale’s access from your Google Account (myaccount.google.com/permissions) or Microsoft account settings. When you disconnect, we delete the stored tokens.

5. Cookies and preferences

The website uses essential storage required for security, sessions, saved preferences and time-limited referral attribution. Automatic anonymous daily counts need no tracking cookie. A compact optional choice near signup or enquiry actions lets visitors allow Google and Meta measurement or decline it. Each category can also be chosen separately in Cookie Preferences. No popup or measurement choice is required to continue using Riyale.

Visitors can review or reset website choices on the Cookie Preferences page.

6. Retention, security and sharing

Information should be retained only for documented service, legal and operational needs. Access controls, encryption, activity history and recovery processes support confidentiality and continuity.

An attributed visitor’s contact details are shared with their referring partner only when the visitor separately selects the optional partner follow-up choice on a form. Partners can see only their own attributed visitors and leads, and access is audited.

7. Your choices

Depending on applicable law and the context, individuals may request access, correction or other action regarding their personal information. Requests involving a law firm’s client data may need to be directed to that firm.

8. Contact

Privacy questions may be sent to sales@riyaletechsolutions.com at Plot 30 Kira Rd, Kampala, Uganda.