RightSlope← Back to RightSlope

Privacy Policy

Last updated: 31 July 2026

This Privacy Policy describes how RightSlope ("we"), operated by RockAnalytica, collects, uses, stores and protects the personal data of platform users ("you"), in accordance with the Brazilian General Data Protection Law — Law No. 13,709/2018 ("LGPD").

1. Data we collect

  • Account data: full name, email, password (stored hashed), company, country and preferred language.
  • Tax data: CPF or CNPJ (users in Brazil) or equivalent tax identification (TIN, other countries), collected solely to issue subscription invoices.
  • Payment data: processed directly by Stripe, Inc. We do not store card numbers; we keep only subscription identifiers and their status.
  • Project data: structural mapping files and analysis parameters that you upload to the platform. These are engineering technical data under your control.
  • Usage records: security events (login, password change, project creation and deletion, subscription events) with date, time and IP address.

2. Purposes and legal bases

  • Service provision (performance of contract, art. 7, V): authentication, storage and processing of your projects, report generation.
  • Charging and invoicing (performance of contract and legal obligation, art. 7, II and V): subscription management and issuance of tax documents with CPF/CNPJ.
  • Security (legitimate interest, art. 7, IX): audit trail, fraud prevention and misuse prevention.
  • Operational communications (performance of contract): signup confirmation, password recovery and subscription notices. These cannot be declined while the account exists, as they are part of the service.
  • Promotional communications (legitimate interest, art. 7, IX): product news and offers, sent to the account e-mail. Every such message carries an unsubscribe link that takes effect immediately, and declining them affects neither your use of the platform nor the operational communications above.

3. Sharing with processors

We use infrastructure providers acting as data processors, under contract and with their own safeguards:

  • Supabase — authentication, database and file storage;
  • Stripe — payment processing and invoice issuance;
  • Vercel and Railway — application hosting.

These providers may process data outside Brazil. International transfers are carried out under the safeguards of art. 33 of the LGPD (contractual clauses and the providers' adequate protection standards). We do not sell or share your personal data for third-party marketing purposes.

4. Retention

Your data is kept while your account is active. When you delete your account, account data, tax data, projects and files are erased immediately. Audit records are kept in a form unlinked from your identity (anonymized) as security evidence, and tax documents may be retained for the period required by tax law.

5. Your rights (art. 18, LGPD)

  • Access and correction: your account data can be reviewed and corrected at any time in Settings.
  • Portability: your project data can be exported to PDF/Excel; the original uploaded file remains available.
  • Erasure: the "Delete my account" button in Settings permanently erases your account, profile, projects, files and payment registration.
  • Withdrawal of consent and other rights: contact us through the channel below.

6. Security

We adopt technical measures aligned with the state of the practice: encryption in transit (HTTPS/TLS), per-user data isolation in the database (Row Level Security), signed session tokens, access control by verified subscription, request rate limiting and an audit trail.

7. Cookies

We use only essential session cookies (authentication) and local interface preferences (theme, language). We do not use advertising or third-party tracking cookies.

8. Controller and contact

RockAnalytica — data controller. To exercise your rights or clarify questions about this policy, contact: contact@rightslope.io.

9. Changes

This policy may be updated. Material changes will be communicated by email or a notice on the platform, with the effective date indicated at the top of this page.