Privacy Policy

1. Who is responsible for your data

The controller of your personal data is Modernum Limited, Socratous 2, Mesa Geitonia, 4006, Limassol, Cyprus ("Modernum", "we"), which operates richenta.com. Questions and requests: info@modernum.solutions.

We try to collect as little personal data as possible. You can write a review and create a QR code without an account, and we do not ask for your name or email for that.

2. What we collect and why

Visitors who write a review

• The text you type, and the text we produce from your voice, together with the edited version and the language. We use it to show you the edited text, to let you copy it, and to show the business that owns the page what its customers wrote (without your name — we do not know it).
• Your voice recording, if you dictate. It is sent to an AI provider to be turned into text and is deleted from our servers right after the transcription, whether it succeeded or failed. We do not keep recordings and we do not create voiceprints or identify you by your voice.
• Whether you pressed the button to open Google. We do not know whether you actually posted a review there.

Businesses with an account

• Your email address and a password. The password is stored only as a salted hash (scrypt), never in readable form.
• The businesses you add (name, address and Google place details), the QR codes and menus you create, and the settings of your account.
• Billing data, when subscriptions are enabled: payments are handled by Stripe and Link (Stripe's merchant-of-record service), which have their own privacy policies and also handle your receipts, taxes and payment support. We receive from them the status of your subscription, the country and the last digits and type of your card; we do not receive or store your full card number.

Anyone who creates a QR code or searches for a business

• The business name, link or place you search for. Searches go to the Google Places service to find the business.
• If you agree in your browser, your approximate location, to find businesses near you. If you do not agree, we use your IP address to estimate your approximate location (city level) through the ipwho.is service. We do not store that location against you.
• A menu file (PDF or image) if you upload one for a business.

Everyone

• Basic usage statistics of our own — for example that a page was opened, a QR code was scanned, a button was pressed, the language and the business page concerned. These events carry no name, email, account or device identifier and are used to show businesses how their pages perform and to improve the product.
• Technical data your browser sends with every request (such as IP address, browser type and the time of the request). We use the IP address to protect the service against abuse and to limit the number of requests; we do not keep it as part of your review or analytics data.
• Anti-abuse checks: some forms use Cloudflare Turnstile, which runs a short check in your browser to tell people from bots.

3. Our legal bases

Where the GDPR applies, we rely on: performing the contract with you (providing the service and your account); our legitimate interests (running, securing and improving the service and preventing abuse); your consent (Google Analytics cookies and, if you allow it, your browser location); and legal obligations (for example accounting and tax records).

4. Cookies and similar technologies

• Strictly necessary: a sign-in session when you log in to the admin area, and small items in your browser storage that remember your language, your consent choice, an unfinished review draft in the current tab, and, on the device where you created a QR code, a private key that lets you change that QR code's menu.
• Analytics (only with your consent): Google Analytics. It is loaded only after you press "Accept" in the banner; if you press "Decline" or ignore the banner, it is not loaded. Google receives usage data such as pages viewed, device and approximate location, and may set cookies.

We do not use advertising cookies and we do not sell or share personal information for advertising.

5. Who receives your data

We share data only with providers that help us run Richenta, and only what they need:

• OpenAI — receives the audio you dictate (for transcription) and the text of your review (for editing) and returns the result.
• Google — Places (business search), Analytics (if you accept) and, when you press the button, the Google Reviews page, which is Google's own service under Google's own privacy policy.
• ipwho.is — receives your IP address to estimate your approximate location when you do not share your browser location.
• Cloudflare — Turnstile bot check.
• Stripe and Link — payments, taxes, receipts and payment support. If you ask Link to delete your payment data, your subscription is cancelled.
• Hetzner — hosting of our servers (in Helsinki, Finland) and database.

The owner of a business page can see the texts written through that page, in the admin area. We do not give personal data to anyone else except where the law or a court requires it.

Some of these providers are based outside the European Economic Area, for example in the United States. Where that happens, the transfer relies on a mechanism recognised by the GDPR, such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework, where the provider offers it.

6. How long we keep data

• Voice recordings: deleted right after transcription.
• Review texts: at the moment we keep the original and the edited text without a fixed time limit, so that the business can see them in its admin area. We intend to introduce a retention period and will update this policy when we do. If a business is deleted, its review texts are kept in anonymised form, no longer linked to the business.
• Account data: for as long as your account exists, and then only as long as the law requires us to keep records.
• Usage statistics: kept without personal identifiers.
• Billing records: for the period required by tax and accounting law.

You can ask us to delete your account and the data tied to it at any time (see section 8).

7. Security

Traffic to richenta.com is encrypted with HTTPS, passwords are stored as salted hashes, access to our servers is limited, and each business sees only its own data. No system is completely secure, so please use a strong, unique password.

8. Your rights

Under the GDPR, and under similar laws elsewhere, you may ask us for access to your personal data, its correction or deletion, a restriction or objection to its processing, and a copy of the data you gave us in a portable format. Where we rely on your consent, you may withdraw it at any time — for example by clearing your browser's site data for richenta.com, after which the banner asks again.

To use these rights write to info@modernum.solutions. We may need to confirm who you are first. Because review texts carry no name or email, we may not be able to find the text that is yours unless you can tell us when and where you wrote it.

You also have the right to complain to your local data protection authority. The authority responsible for us is the Office of the Commissioner for Personal Data Protection of Cyprus (dataprotection.gov.cy).

9. Children

Richenta is not directed at children under 16, and business accounts are for adults. We do not knowingly collect personal data from children. If you believe a child has given us data, write to us and we will delete it.

10. Changes to this policy

We will update this policy when the product or the law changes. The date at the top shows the latest version; for a significant change we will tell registered users in advance.

11. Contact

Modernum Limited, Socratous 2, Mesa Geitonia, 4006, Limassol, Cyprus. Email: info@modernum.solutions.