Roles
The owner decides what is processed and why. Rikuy processes on the owner’s behalf.
Instructions
The owner’s instructions are the camera access, the schedule and the days back set in the app. Rikuy enforces them on the server.
Categories of data
Images of the store and the people in it, without audio. Account data. The activity log.
Security
Outbound-only Bridge, no ports opened at the store, signed links that expire, access to support only with the owner’s consent.
Retention and deletion
Activity 12 months, thumbnails 30 days by default. On cancellation, scheduled deletion after the owner can export.
Subprocessors
List of providers and how owners are told about changes.
Incidents
How and how fast Rikuy tells the owner if something goes wrong. Timeframe to be set by counsel.
Audits and end of contract
What the owner can ask to verify, and what happens to the data when the contract ends.
Version history
| Version | Date | Change | Status |
|---|---|---|---|
| v0.1 | October 2026 | First structure for the private demo | Draft, not in force |
| v1.0 | Before launch | Binding text reviewed by counsel | Planned |
Questions about this document: [email protected] (address to confirm). When a new version is published, owners are notified by email and the app shows which version each owner accepted.