> Source: https://rikuy.si/legal/dpa/ . Updated 2026-10-20. Rikuy, rikuy.si

Draft for review by counsel, not legal advice.
This page shows the structure and the plain-English intent of each section. The binding text will be written and reviewed by a lawyer before Rikuy leaves its first public release.

Draft v0.1
Not yet in force
Applies to: business accounts, accepted at sign-up

01

## Roles

The owner decides what is processed and why. Rikuy processes on the owner’s behalf.

02

## Instructions

The owner’s instructions are the camera access, the schedule and the days back set in the app. Rikuy enforces them on the server.

03

## Categories of data

Images of the store and the people in it, without audio. Account data. The activity log.

04

## Security

Outbound-only Bridge, no ports opened at the store, signed links that expire, access to support only with the owner’s consent.

05

## Retention and deletion

Activity 12 months, thumbnails 30 days by default. On cancellation, scheduled deletion after the owner can export.

06

## Subprocessors

List of providers and how owners are told about changes.

07

## Incidents

How and how fast Rikuy tells the owner if something goes wrong. Timeframe to be set by counsel.

08

## Audits and end of contract

What the owner can ask to verify, and what happens to the data when the contract ends.

## Version history

| Version | Date | Change | Status |
| --- | --- | --- | --- |
| v0.1 | October 2026 | First structure for the private demo | Draft, not in force |
| v1.0 | Before launch | Binding text reviewed by counsel | Planned |

Questions about this document: legal@rikuy.si (address to confirm). When a new version is published, owners are notified by email and the app shows which version each owner accepted.

## The short version lives on Trust.

What the agent can see, what we keep and for how long, and the employee notice to download, in plain words.

[Go to Trust](https://rikuy.si/trust/)
[Start free](https://rikuy.si/start/)