Privacy Policy
LAST UPDATED: AUGUST 18, 2026
1. Who this policy covers
This policy applies to visitors of rectifia.com, and to reporters, HR administrators, and case handlers who use the Rectifia platform under a customer's account. If you were referred here by a specific employer's implementation of Rectifia, that employer's own workplace policy governs how they use reports internally; this page covers how Rectifia, as the vendor, handles data.
2. What we collect
Website visitors: standard analytics data (pages viewed, referrer, device type) and any information you submit through the demo request form (name, work email, company, team size, notes). Platform users: case content, evidence, and metadata submitted by reporters and handlers; account information for HR admins and investigators. In anonymous reporting mode, we do not collect or store any identity data for the reporter - no name, email, phone number, or reversible identifier.
3. How we use data
We use demo request information to respond to inquiries and follow up about the product. We use platform data solely to operate the case management and reporting service for the customer that owns the account - to route cases, apply severity scoring, run the consistency check, and track compliance deadlines. We do not sell personal data, and we do not use customer case content to train third-party models.
4. Data storage and security
Case data and the encrypted identity vault are stored in region-appropriate infrastructure with encryption at rest and in transit. Access to case content is role-based: HR sees case metadata, handlers see only assigned cases, and Company Admin has no access to case content by design. Specific hosting regions and infrastructure details are confirmed in each customer's contract and security documentation.
5. Data retention and deletion
Customers can export their full case history at any time. When a customer offboards, we work with them to export remaining data and delete it from our systems on an agreed schedule. Demo request information is retained only as long as needed to respond to the inquiry, unless you become a customer.
6. Your rights
Depending on your jurisdiction, you may have rights to access, correct, or request deletion of personal data we hold about you. Reporters using anonymous mode cannot be identified by us, so identity-based requests can only be actioned through the case ID and passcode issued at submission. For all other requests, contact privacy@rectifia.com.
7. Changes to this policy
We may update this policy as the product and our infrastructure evolve. Material changes will be reflected with an updated date on this page.
8. Contact
Questions about this policy can be sent to privacy@rectifia.com.
THIS PAGE IS A GENERAL SUMMARY AND NOT LEGAL ADVICE. YOUR ORGANIZATION’S CONTRACT AND DATA PROCESSING ADDENDUM GOVERN IN THE EVENT OF ANY CONFLICT.