1. About This Policy

This Privacy Policy describes how SmartBiz, a product of RiziSoft LLC (“we,” “our,” or “RiziSoft”), collects, uses, and protects personal data in connection with the SmartBiz business operating platform and this website at smartbiz.rizisoft.com.

RiziSoft LLC is incorporated in the State of Delaware, United States and is the Controller for Vendor-side SmartBiz enquiry and onboarding data. To get in touch, use the SmartBiz contact page.

2. Data We Collect

2.1 Website visitors

When you visit smartbiz.rizisoft.com, we may collect standard server log information including IP address, browser type, pages visited, and referral URL. We do not use tracking cookies for advertising purposes on this domain.

2.2 Contact enquiries

When you submit a contact or pricing enquiry, we collect the information you provide — including your name, company name, business email address, selected SmartBiz offering or Niche, and the content of your message. We use this information to respond to your enquiry, evaluate the requested offering, and prepare an onboarding invitation when appropriate.

2.3 Onboarding

Onboarding may include Business identity and address information, legal and operating region, primary contact details, Business owner name and contact details, login identifier, Workspace configuration, selected applications and access channels, commercial-offer acknowledgements, currency and tax choices, hosting and database-target information, connection-test evidence, submission undertakings, review history, and provisioning status. New-Capsule and customer-managed database credentials are handled as write-only security material and are not presented back as plaintext.

2.4 SmartBiz platform operators and business users

SmartBiz is a B2B platform deployed at the operator’s premises or server infrastructure. Personal data processed inside a SmartBiz deployment — including business partner contact information, employee records, and transaction data — is controlled by the operating business. RiziSoft processes such data only as a data processor under a service agreement, in accordance with applicable law.

3. How We Use Your Data

To respond to your enquiry and take requested steps toward a possible SmartBiz service agreement.
To prepare an onboarding invitation and provision a SmartBiz deployment for a contracted business.
To protect the service, prevent abuse, audit restricted access, and diagnose platform issues.
To comply with applicable legal obligations.

For enquiries and requested onboarding steps, we rely on Article 6(1)(b) of the EU General Data Protection Regulation. For proportionate security, abuse prevention, and access evidence, we rely on our legitimate interests under Article 6(1)(f). We do not sell personal data, use it for advertising profiling, or treat an enquiry as consent to marketing.

Onboarding, licensing, and provisioning requested by the Business use Article 6(1)(b). Applicable legal recordkeeping uses Article 6(1)(c). Optional marketing or non-essential technologies use consent where consent is required. Privacy-policy acknowledgement confirms that this notice was presented; it is not consent to marketing. Vendor review remains part of onboarding approval, so onboarding is not decided solely by automated processing.

4. Data Storage, Retention, and Security

SmartBiz platform deployments store data on infrastructure controlled by or contracted to the operating business. RiziSoft implements security controls at the application level, including row-backed access control, encrypted credential storage, sensitive-data masking, and append-only audit records.

Website enquiries are stored in the Vendor system and sent to our business email system. Unconverted, expired, declined, and duplicate-suppressed lead details are deleted 12 months after submission. When onboarding is completed, the original lead details are deleted 90 days after completion. A valid failed submission is deleted 90 days after resolution and never later than 12 months after submission.

Non-identifying invitation outcomes, deletion proof, and restricted-access security records may be retained for 24 months. Internal email copies follow the same deadline as the corresponding lead. Backups expire through our normal four-week cycle, and expired lead data is suppressed before restored data returns to active use. A legal hold may pause deletion only for the affected record.

Onboarding and active-customer records are retained for the onboarding or service relationship and afterward only for the period required by the applicable agreement, security needs, dispute limitation periods, or legal obligations. Credentials follow their stricter security lifecycle. When retention ends, operational copies, derivatives, indexes, and ordinary search or reveal access are removed or irreversibly anonymized, while only permitted non-identifying proof remains.

5. Recipients and International Processing

Access is limited to authorized RiziSoft personnel who need the information to handle the enquiry, onboarding, security, or a valid privacy request. Contracted hosting, email, security, and support providers may process the minimum information needed to provide those services. We do not disclose lead data for independent advertising or unrelated commercial use.

RiziSoft LLC is established in the United States, and some service providers may process data outside the European Economic Area. Where EU data-transfer rules apply, we use an applicable lawful transfer mechanism and contractual safeguards.

Provider categories include hosting, identity, email, security, backup, monitoring, and professional services. Personal data is limited to authorized personnel and providers that need it for enquiry handling, onboarding, provisioning, support, security, compliance, or privacy-request handling.

6. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict, or receive a copy of personal data we hold about you, and to object to processing based on legitimate interests. To exercise these rights, submit a privacy request through our contact page. We respond without undue delay and ordinarily within one month. We may request information needed to verify your identity before disclosing or deleting personal data.

You may lodge a complaint with the data-protection authority competent for your location. Where processing depends on consent, you may withdraw consent without affecting earlier lawful processing.

For personal data processed inside a SmartBiz deployment owned by a third-party business, please direct your request to that business as the data controller.

7. Cookies

This website does not use advertising or tracking cookies. We may use strictly necessary session and preference technologies, and Cloudflare Turnstile processes technical signals to protect public forms against automated abuse. No third-party advertising networks have access to visitor data through this domain.

8. Security and Business Responsibilities

We use access controls, encryption and hashing appropriate to the data, masked displays, antiforgery protection, restricted reveal, audit evidence, credential-handling boundaries, and operational monitoring. The Business must be authorized to provide another person’s data and must protect invitations, accounts, and credentials. SmartBiz is a business service and is not directed to children.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected in a revised “Last updated” date at the top of this page. Where applicable law requires additional notice or consent for a material change, we will provide it before the new processing begins.

For the latest Terms, Privacy Policy, and related policy updates, consult the current legal notices published on the product website.

10. Contact

For privacy-related questions or requests, contact the SmartBiz team.