Privacy Policy

This policy explains what Rics.app does with personal information, and what it does not do with it.

Rics.app is a product of UMR Labs, of West wind point, Cha 89/4, 1st Floor, Progoti Shoroni, North Badda, Dhaka, Bangladesh. You can reach us at support@rics.app.

Two kinds of information, and the difference matters

Information about our customers. The businesses who buy Rics.app, and the people who work for them. Names, email addresses, phone numbers, the business name and records of payments. We decide how this is used, and this policy governs it.

Information about our customers' customers. The people who message those businesses on WhatsApp or Facebook. Their messages, names, phone numbers or Facebook identifiers, photographs, voice notes, documents and any order details. We hold this on behalf of the business, on their instructions, and only so that the business can answer them. We do not decide what is collected or why.

If you messaged a business and want your information corrected or removed, please ask that business directly. They control it. Write to us at support@rics.app and we will help them act on your request.

What we collect about our customers, and why

Account information, so you can sign in and so we know which business you belong to: your name, email address, phone number, your password stored only as a one way scrypt hash that cannot be reversed, your role, and when you were last active.

Verification codes at sign up. When you create an account we send a six digit code to your email address and another to your phone number. The codes are stored only as a hash, expire after ten minutes and are destroyed once used.

Records of what was done inside a workspace — who changed a setting, who connected a channel, who deleted something. These exist for security and support, and for your own audit trail.

Payment records, where you pay us for the Rics.app subscription.

What we hold on behalf of our customers

Messages and attachments received from WhatsApp and Facebook, so that the business's team can read and answer them in one place. Where a customer sends a photograph, voice note or document, we fetch the file from Meta and store it, because Meta's own link expires and the business would otherwise lose it.

Customer records, tags, internal notes, orders, products and commission records created by the business in the course of using the service.

What we do not do

We do not sell personal information to anybody.

We do not use your messages, or your customers' messages, to train artificial intelligence models.

We do not use advertising trackers on the application, and we do not build profiles of your customers for advertising.

Our staff do not read client conversations. Where access is needed to help with a support request, it must be granted deliberately, is limited in time, is recorded with a reason, and appears in that client's own activity log so they can see it happened.

WhatsApp and Facebook

Messages travel through Meta Platforms, and Meta handles them under its own privacy policy, which we do not control.

When a business connects a WhatsApp number through Rics.app, Meta's own sign up window creates a WhatsApp account that belongs to that business, not to us. We receive an access token that lets us send and receive on their behalf. That token is encrypted before it is stored.

The Meta application credentials held by the platform administrator are encrypted using a key kept outside the database, are never displayed again after they are saved, are never written to logs or error messages, and are never shared between businesses using Rics.app.

Where information is kept, and who can see it

Information is stored on servers we control, located outside Bangladesh at our hosting provider. By using the service you agree to it being stored and processed there.

Each business's workspace is separated from every other at the database level. The application refuses any query that is not tied to a single workspace, and this is enforced in code rather than left to care. Only people invited to a workspace can see what is in it.

Passwords are never stored in a readable form. Access tokens and other secrets are encrypted. Uploaded files sit outside the public website and are served only through a route that checks who is asking.

Who we share information with

We share information only with the services needed to operate Rics.app:

Meta Platforms, because WhatsApp and Facebook messages travel through them.

Our hosting provider, which stores the data and runs the application.

Email and SMS providers, used to send verification codes, invitations and account notices. They receive the recipient's address or number and the content of that message, nothing more.

We may also disclose information where the law requires it, or to establish or defend a legal claim.

How long we keep it

Account and workspace information is kept while the account is open.

After a subscription ends, the workspace becomes read only and the data is kept for a further period — sixty days unless otherwise agreed — so that the business can return without losing anything. We remind them several times during that period. After it, the workspace is reviewed and may be deleted. Deletion is always a decision taken by a person, never an automatic event.

Deleting a conversation removes its messages and attachments. Deleting a workspace removes everything in it, including uploaded files, and cannot be undone.

Sign up attempts that are never completed are deleted after one day.

Your rights

You may ask us for a copy of the information we hold about you, to correct it, or to delete it. Write to support@rics.app and we will respond within a reasonable period and in any event within thirty days.

If you are a customer of a business using Rics.app, your request should go to that business, because the information is theirs. We will help them act on it.

Children

Rics.app is a tool for businesses and is not intended for anyone under the age of eighteen. We do not knowingly collect information from children.

Changes to this policy

We may update this policy. The date shown at the top of this page is when it last changed. Where a change materially affects you, we will tell you through the application or by email.

Contact

UMR Labs West wind point, Cha 89/4, 1st Floor Progoti Shoroni, North Badda Dhaka, Bangladesh

Email: support@rics.app Phone: +8801797262459