1. Who we are
This Privacy policy explains how Redijo collects, uses, shares and protects personal data. Redijo is the data controller for your account data and acts as a data intermediary for the data inside the files you upload — you remain in control of that content.
2. Data we collect
Account data
Name, email, company and billing information needed to create and maintain your account.
Files you upload
Spreadsheets, CSV, OFX statements, documents and ERP exports you choose to import. This content may include third-party data (customers, suppliers) under your responsibility.
Usage data
Technical logs such as access dates, in-app actions and credit-usage metrics, used to operate and improve the service.
3. Product analytics
Redijo uses product analytics to improve the service — always over usage metadata, never the content of your files. Customer files stay in Redijo's storage region; only usage data reaches the analytics tool.
Marketing site (redijo.com)
On the marketing site we use PostHog Cloud (hosted in the United States) for pageview analytics only — cookieless: in-memory persistence, so no analytics cookies and no localStorage, no autocapture and no session recording. Your browser's Do Not Track signal is respected.
Product app (app.redijo.com)
In the product app we use PostHog Cloud (US) for product analytics and session replay. Input values are masked client-side by default, and anonymous visitors do not get person profiles — only identified users do. Do Not Track is respected, and there is a durable in-product opt-out that stops capture entirely.
4. How we use data
- run the service: process files and generate cited reports;
- authenticate access and send links and notifications;
- bill subscriptions and manage credits;
- provide support and improve platform security and stability.
We do not use your content to train AI models and we do not sell personal data.
5. AI processing
When you use the hosted AI, the selected files are processed to draft the report. This processing is carried out under agreements that prohibit using your content to train models. If you connect an external AI client (such as ChatGPT), processing in that service also follows the policy of the provider you chose.
6. Who we share with
We share data only with processors that help us deliver the service, always under contract and only as far as needed:
- Cloudflare — edge hosting, immutable file storage and AI gateway;
- Neon — managed Postgres database;
- Paddle — card payment processing, as merchant of record (UK/US);
- PostHog — product analytics of usage metadata, never file contents, in the United States.
We may disclose data where required by law or court order.
7. Storage and security
Data is stored in a single converged cloud region, with encryption in transit and at rest and restricted access control. We keep your files and reports while your account is active; after closure, data is removed within 90 days, except where retention is legally required.
8. Your rights
You can access, correct, export or delete your data at any time. The rights under Singapore's PDPA are detailed in the Data protection document.
9. International transfers
Your data is hosted in a single converged cloud region. When a processor needs to handle data outside that region, we apply the appropriate safeguards required under the PDPA's Transfer Limitation Obligation — such as specific contractual clauses — to ensure a comparable standard of protection.
10. Contact and Data Protection Officer
To exercise rights or ask a question, write to our Data Protection Officer at privacy@redijo.com.