RHM Digital Privacy Policy

1. Who are we?

RHM Digital is a SaaS platform that helps companies measure and improve their visibility in AI-generated responses. We are responsible for processing your personal data within the meaning of the General Data Protection Regulation (GDPR).

RHM Digital B.V.
KVK-nummer: 96966912
BTW-nummer: NL005240319B57
Email: info@rhmdigital.com

2. What data do we collect?

We collect the following categories of personal data:

Account data: Email address, name and password (encrypted via Clerk Authentication).
Workspace data: Company name, website URL, industry and competitors and keywords you have entered.
Usage data: Which AI models you measure, prompts you enter, and score results that are stored.
Technical data: IP address, browser type, timestamp of login attempts and session information.
Payment data: Processed entirely by our payment provider. We do not store card payment details.

3. Why do we process your data?

Performance of contract

To provide the service you signed up for - measuring AI visibility and generating recommendations.

Legitimate interest

For improving the platform, security monitoring and fraud prevention.

Legal obligation

When we are required to retain data under tax or accounting legislation.

Consent

For marketing communications, if you have explicitly given your consent.

4. Do we share data with third parties?

We share your data only in the following situations:

AI providers (OpenAI, Anthropic, Google, OpenRouter): your prompts are sent to generate AI responses. We do not send personal data along with them.
Clerk Authentication: for managing your account and authentication.
Hosting providers: for storing data within the EU.
Payment providers: for processing subscription payments.
Government authorities: when we are legally required to provide data.

5. How long do we retain your data?

Account data

Up to 30 days after account deletion

Score results and prompts

For the duration of the subscription + 90 days

Invoice data

7 years (statutory retention obligation)

Log files

90 days

6. Your rights

Under the GDPR you have the following rights:

Right of access to the data we process about you
Right to rectification of inaccurate data
Right to erasure ('right to be forgotten')
Right to restriction of processing
Right to data portability
Right to object to processing
Right to lodge a complaint with the supervisory authority

Send an email to info@rhmdigital.com to exercise any of these rights. We will respond within 30 days.

7. Security

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse. All connections are encrypted via HTTPS/TLS. Passwords are never stored in plain text.

8. Cookies

We use only functional cookies that are necessary for the operation of the platform (session authentication). We do not place tracking or advertising cookies.

9. AI transparency

Prompts you enter or that we generate on your behalf are sent to third-party AI providers (OpenAI, Anthropic, Google, Perplexity) via OpenRouter to produce visibility measurements and summaries. We keep a record of these AI calls (model used, prompt, output, and risk classification) for audit purposes under the EU AI Act. See our AI disclaimer and AI literacy pages for details on which systems we use and how to interpret their output.

10. Changes

We may update this privacy policy from time to time. For material changes you will receive an email notification. The date at the top of this document indicates when the most recent version was published.

11. Contact

Questions about this privacy policy? Contact us at info@rhmdigital.com.