Privacy Policy
Effective Date: September 2026 • Global GDPR, CCPA & DPDP Compliant
1. Core Philosophy: Offline-First Privacy
Rixoffice (engineered by Rixcart) was created on a foundational principle: your documents belong to you and nobody else. Unlike cloud-first office suites that store, scan, and index your files on remote servers, Rixoffice processes your files locally on your computer. Your text, spreadsheets, presentations, and PDFs never leave your hardware unless you choose to export or transmit them.
2. Information We Collect
Because Rixoffice is offline-first, our data collection footprint is minimal: • Account Credentials: When you sign in with Google OAuth, we receive your name, email address, profile avatar, and cryptographic user ID. We use this solely for account authentication, device licensing, and subscription management. • Billing & Transaction Data: Payments are handled by PCI-DSS Level 1 compliant payment gateways (Razorpay). We store only order IDs, plan details, payment timestamps, and masked transaction references. We NEVER view, collect, or store your full credit card numbers or banking PINs. • Technical & Edge Telemetry: When you browse our website, Cloudflare edge servers log standard connection metadata (IP country, user-agent, edge latency) to detect geographic currency and safeguard our network against DDoS threats. We enforce IP anonymization.
3. Information We Never Collect
We explicitly do NOT collect: • Your document, spreadsheet, presentation, or PDF contents. • Keystroke dynamics, text selections, or writing habits. • Third-party advertising profiles or behavioral ad tracking tags. • Biometric or sensitive personal identification data.
4. Artificial Intelligence & Document Data
Rix AI features are engineered for zero-retention privacy: • Local Models (Ollama): Run entirely on your physical machine; zero network payloads are transmitted. • Cloud AI Completions: When using Rix AI credits or Bring-Your-Own-Key connections, prompt fragments sent to generate completions are not stored permanently by Rixoffice and are NEVER used to train commercial foundation models.
5. Legal Basis for Processing (GDPR & International Law)
For residents of the European Economic Area (EEA), United Kingdom, and jurisdictions governed by GDPR-aligned statutes: • Contractual Necessity: To process subscriptions, manage account credentials, and deliver software updates. • Legitimate Interests: To defend network security, prevent fraud, and maintain operational reliability. • User Consent: For non-essential cookies and optional marketing notifications (which you may withdraw at any time).
6. Your Global Privacy Rights (GDPR / CCPA / DPDP)
Regardless of where you reside, Rixoffice accords you the following rights: • Right to Access: Request a copy of the personal information we hold concerning your account. • Right to Rectification: Correct inaccurate account profile details via your dashboard. • Right to Erasure ('Right to be Forgotten'): Request the permanent deletion of your account and billing history. • Right to Restrict Processing & Portability: Request an export of your account metadata. • Non-Discrimination: We will never deny services or charge different prices for exercising your privacy rights. To exercise any of these rights, email privacy@rixcart.com.
7. Data Retention & International Transfers
Account records are retained for the duration of your active subscription and as required by statutory financial accounting laws. When data is transferred internationally (e.g., between Cloudflare edge nodes), transfers are safeguarded by Standard Contractual Clauses (SCCs) and encryption.
8. Contact Data Protection Officer (DPO)
If you have questions, inquiries, or complaints regarding this Privacy Policy: • Data Protection Officer: privacy@rixcart.com • General Inquiries: contact@rixcart.com • Response Time: All privacy requests are answered within 30 days.