Your data security and privacy are fundamental to our operations. This policy explains how we collect, use, and protect your information.
Reliatic collects information necessary to provide our industrial reliability management platform. This includes:
We use collected information for the following purposes:
For users in the European Economic Area (EEA), the United Kingdom, and Switzerland, Reliatic processes personal data only where one of the lawful bases set out in Article 6(1) of the EU/UK General Data Protection Regulation (GDPR) applies. The table below maps each processing activity to its corresponding legal basis.
| Processing purpose | GDPR Art. 6 lawful basis | Notes |
|---|---|---|
| Account creation, authentication, and tenant management | Art. 6(1)(b) — Contract | Processing is necessary to provide the Reliatic platform under our Terms of Service. |
| Service delivery (asset records, FMEA, RBI, inspections, reporting) | Art. 6(1)(b) — Contract | Performance of the customer agreement and the platform features the customer has subscribed to. |
| Customer support, account management, transactional email | Art. 6(1)(b) — Contract | Necessary to administer the contract and respond to support requests. |
| Security, fraud prevention, abuse detection, rate limiting, audit logging | Art. 6(1)(f) — Legitimate interests | Our legitimate interest in protecting the platform, customers, and end-users from unauthorised access and abuse. Balanced via a Legitimate Interests Assessment available on request. |
| Product analytics, telemetry, error reporting (non-essential) | Art. 6(1)(a) — Consent | Only where you have given consent via the cookie banner. You may withdraw consent at any time without affecting service delivery. |
| Marketing communications (newsletters, product updates) to prospects | Art. 6(1)(a) — Consent | Explicit opt-in only. Customers receive transactional service messages under contract; marketing is consent-based. |
| Billing, invoicing, accounting, tax records | Art. 6(1)(b) — Contract & Art. 6(1)(c) — Legal obligation | Necessary to administer the contract and to comply with applicable tax, accounting, and corporate-records laws. |
| Responding to lawful requests from regulators or courts | Art. 6(1)(c) — Legal obligation | Disclosure limited to what is strictly required by the legal order; customer notified where permitted. |
| Establishment, exercise, or defence of legal claims | Art. 6(1)(f) — Legitimate interests | Retention beyond the standard contractual period where required to defend a claim. |
Where we rely on consent (Art. 6(1)(a)) you have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. Where we rely on legitimate interests (Art. 6(1)(f)) you have the right to object on grounds relating to your particular situation; see Section 7 (Your Rights & Choices).
We implement rigorous security measures to protect your data:
All data encrypted at rest and in transit using military-grade encryption.
We follow SOC 2-aligned practices. A formal third-party Type II audit is in progress (target Q1 2027).
Granular permission controls ensure users only access authorized data.
Comprehensive, immutable logging of all data access and system changes.
We do not sell your data. We may share information only in the following limited circumstances:
Reliatic Platforms Inc. is established in the United States. Our primary production infrastructure is hosted in the United States (US-East region) for the v1 platform; a dedicated EU region is planned for Q3 2026. As a result, personal data of users located in the EEA, the United Kingdom, or Switzerland is transferred to, and processed in, the United States by Reliatic and by certain sub-processors.
Where personal data is transferred outside the EEA, the UK, or Switzerland to a country that has not received an adequacy decision, Reliatic relies on one or more of the following safeguards under GDPR Chapter V:
The complete, current list of sub-processors — including each entity's region, transfer mechanism, and certifications — is published at /legal/subprocessors. The SCCs incorporated by reference into our Data Processing Agreement are available at /legal/dpa. You may request a copy of the operative SCCs and TIA by emailing legal@reliatic.com.
You have the following rights regarding your personal data:
To exercise these rights, contact us at privacy@reliatic.com. We respond to verified requests within 30 days (extendable by a further 60 days for complex requests, per Art. 12(3) GDPR).
Reliatic Platforms Inc. has designated a Data Protection Officer (DPO) and, in accordance with Art. 27 GDPR and Art. 27 UK GDPR, an EU and UK Representative for data subjects located in the European Economic Area and the United Kingdom.
Contact: dpo@reliatic.com
Role:Independent oversight of Reliatic's data-protection compliance, point of contact for supervisory authorities and data subjects.
Contact: eu-rep@reliatic.com
The full name and postal address of the appointed Article 27 representative is published in our Data Processing Agreement at /legal/dpa.
Data subjects in the EEA, UK, or Switzerland may contact either the DPO or the Article 27 representative directly regarding any matter related to the processing of their personal data or the exercise of their rights under the GDPR.
We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be communicated via email or platform notification.
Privacy enquiries: privacy@reliatic.com
Data Protection Officer: dpo@reliatic.com
EU / UK Representative: eu-rep@reliatic.com
Company: Reliatic Platforms Inc. (Delaware, USA)
Questions about our privacy practices? We're here to help.
Contact Us