Privacy Policy

1. Introduction

At Ryse Technology LLC, a Texas limited liability company (“we,” “our,” or “us”), we operate as a premier managed service provider in Austin, TX. This Privacy Policy describes how we collect, use, share, and protect information in connection with our website and IT support services. By using our website or booking a service, you agree to the practices described in this policy.

2. Information We Collect

We collect information that allows us to provide high-quality technical support and advisory services:

• Contact Information: Name, email address, and phone number provided through our booking form, contact inquiries, or account registration.
• Service Address: Physical addresses within the Austin area where on-site technical support is requested.
• Payment Information: We facilitate payments through Stripe. While we initiate the transaction, your credit card and billing details are processed directly by Stripe under their secure protocols. We retain only summary metadata such as the last four digits of the card, billing ZIP, and transaction references.
• Technical Requirements: Information about your devices, software, network configuration, and systems provided during consultations or troubleshoot requests.
• IP Address & Approximate Location: For security monitoring, fraud prevention, and service-area validation, we may log your IP address and derive approximate (city/region-level) geolocation using a locally installed copy of MaxMind's GeoLite2 database.
• Device & Browser Information: User agent, browser type, operating system, and screen size for compatibility, analytics, and security purposes.
• Authentication Data: Email address, hashed verification codes, passkey public keys (no private biometric material is transmitted to or stored by us), and session identifiers stored server-side. Session cookies contain only an opaque identifier.
• E-Signature Data: When you sign a service contract digitally, we store the image of your signature, the timestamp, and the IP address from which it was submitted, as evidence of your assent. Signature data is treated as Confidential Information and stored encrypted at rest.
• Push Notification Subscriptions: If you opt in to browser push notifications, we store the subscription endpoint provided by your browser's push service. You may unsubscribe at any time from your dashboard or browser settings.
• Cookies & Local Storage: We use first-party cookies for authentication (session tokens), security (Cloudflare Turnstile challenges), and preferences (theme). We do not use third-party advertising cookies or cross-site tracking technologies.
• Service Records: Booking history, support tickets, internal notes prepared by our technicians, and contract documents.

3. How We Use Your Information

Your information is used strictly to enhance our service delivery:

• To schedule and execute on-site or remote IT support appointments.
• To process payments, issue receipts, and manage recurring subscriptions.
• To communicate regarding your technical inquiries, support tickets, and account.
• To prepare, deliver, and store signed service agreements and related documentation.
• To secure our website and services through bot detection (Cloudflare Turnstile), rate limiting, and abuse-prevention measures.
• To send transactional notifications by email, and, with your explicit opt-in, SMS text messages and browser push notifications.
• To comply with our legal, tax, and regulatory obligations.

We do not sell your personal information. We do not use your information for targeted advertising or significant automated profiling decisions.

4. Third-Party Service Providers

We partner with industry-standard platforms to operate our business. Each provider acts as a processor under our direction:

• Stripe: For secure payment processing and recurring subscription billing. Stripe's privacy policy governs their independent use of your payment data.
• Cloudflare: We use Cloudflare Turnstile for spam and bot protection on our public forms.
• Resend: For sending transactional emails such as booking confirmations, contract notifications, invoices, and receipts, delivered from notifications.rysetech.net.
• Twilio: For delivering appointment-related SMS text messages to customers who have opted in. Only your phone number and the message content are shared with Twilio, solely for message delivery.
• Amazon Web Services (AWS S3, CloudFront): For secure storage and delivery of contract PDFs, signature images, and uploaded service media. Data is encrypted at rest and in transit.
• MaxMind GeoLite2: For approximate geolocation lookup based on IP address. No personal information is sent to MaxMind; the database is downloaded and queried locally on our servers.
• Google (Gemini API) and DeepSeek: When admin staff prepare a custom service contract for a residential client, the technician's high-level service notes (“Do's” and “Don'ts”) may be sent to a third-party large language model to format them into contract-grade sentences. We do not send personally identifiable information, account credentials, or device-specific data to these services.
• Railway: Cloud infrastructure provider hosting our application and database. Subject to Railway's privacy policy and Data Processing Agreement.
• Web Push Services (browser-provided): When you opt in to push notifications, delivery is handled by your browser vendor's push service (for example, Firebase Cloud Messaging for Chrome, Apple Push Notification Service for Safari, and Mozilla autopush for Firefox).
• Mapping Services: We may use address validation tools to ensure accurate service routing.

We may also disclose information when required by law, valid legal process, or to protect the rights, property, or safety of Ryse Technology, our clients, or others.

5. Data Security & Retention

We implement administrative, technical, and physical safeguards designed to protect your personal information, including TLS/SSL encryption in transit, encryption at rest for stored documents and signatures, server-side session management (no sensitive data in cookies), rate limiting and bot protection, and role-based access controls limiting staff access on a need-to-know basis.

Retention Periods:

• Active client records (contact information, service history): retained for the duration of the client relationship plus seven (7) years thereafter to meet tax, accounting, and warranty obligations.
• Signed contracts and signature images: retained for seven (7) years from the contract end date.
• Payment records: retained as required by Stripe and applicable tax law.
• Marketing and inquiry data from unconverted contact form submissions: retained for twenty-four (24) months.
• Server logs, IP-based geolocation results, and analytics page views: retained for ninety (90) days.

You may request deletion of your data at any time, subject to legal retention obligations, by contacting info@rysetech.net.

In the event of a confirmed data breach affecting your personal information, we will notify you and applicable regulators in accordance with Texas Business & Commerce Code §521.053 and any other applicable law.

6. Your Privacy Rights

Texas Residents (TDPSA). If you are a Texas resident, you have the right to (i) confirm whether we process your personal data, (ii) access your personal data, (iii) correct inaccuracies, (iv) request deletion, (v) obtain a portable copy of your data, and (vi) opt out of targeted advertising, the sale of personal data, or profiling for significant decisions. We do not sell personal data and we do not use personal data for targeted advertising or significant profiling decisions. To exercise these rights, email info@rysetech.net. We will respond within forty-five (45) days. If we decline a request, you may appeal within a reasonable period, and you may also lodge a complaint with the Texas Attorney General.

California Residents (CCPA/CPRA). We do not sell personal information as that term is used in the CCPA. California residents may request the categories of personal information we have collected, the sources from which it was collected, the business purpose, and the categories of third parties with whom we share data. You may also request deletion. We will not discriminate against you for exercising these rights.

EU/UK Residents (GDPR / UK-GDPR). To the extent GDPR applies, you have the right to access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your supervisory authority. Our lawful basis for processing is contract performance (Article 6(1)(b)) and legitimate interest (Article 6(1)(f)) for security and fraud prevention.

To exercise any of these rights, contact info@rysetech.net. We may request verification of your identity before responding.

7. Children's Privacy

Our services are not directed to individuals under 18 and we do not knowingly collect personal information from minors. If we learn that we have collected such information, we will delete it.

8. SMS/Text Messaging

With your explicit opt-in, we send appointment-related text messages such as booking confirmations, appointment reminders, service updates, and technician on-the-way alerts with a live tracking link. Consent is collected through an unchecked-by-default checkbox on our booking form or the notification settings in your account dashboard, and is never a condition of purchase. Message frequency varies with your appointment activity (typically one to three messages per appointment). Message and data rates may apply.

You can opt out at any time by replying STOP to any message, by turning off text updates in your account dashboard, or by contacting us at info@rysetech.net. Reply HELP to any message for assistance, or reach us at 512.554.4790.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, excluding aggregators and providers of the text message services.

9. Marketing Communications

We will only send marketing emails with your consent. You may unsubscribe at any time using the link in any marketing email or by contacting us. Transactional emails (booking confirmations, receipts, contract notifications, and account or security alerts) are sent as part of the service and are not subject to unsubscribe.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by a prominent notice on our website before the change takes effect. The “Updated” date at the top of this policy reflects the most recent revision.