What Rigyx does to protect your data — and what it does not.
Every line on this page is something the product's code does today. The secrets you give Rigyx are encrypted at rest. Sensitive actions are written to an audit log. Every agent action can be traced. A deletion waits 30 days, and you can cancel it until then.
14 days free · no card
The measures, in plain words.
Encryption
In transit: every connection to Rigyx uses TLS (HTTPS), and mailboxes are read over TLS with the server's certificate checked. At rest, the application encrypts with AES-256-GCM: mailbox passwords, the AI provider keys you bring, Google Ads, Analytics and Search Console tokens, Slack, Moltbook and plugin (MCP) connection tokens, Google Calendar and Outlook calendar access, accounting connection credentials (QuickBooks, Xero), store connection secrets, voice provider (ElevenLabs) keys, single sign-on client secrets, bank account numbers saved for payments, the private keys your agents sign with. Other data is stored in the database without this extra layer.
Separation between businesses
Every query for a business’s data is limited to that business, and a team member acts only within the role they hold in it — checked again on every request, so a removed member loses access at once.
GDPR data rights
Export, correct and delete your data in the dashboard. A deletion is confirmed by e-mail and carried out 30 days later; you can cancel it until then.
Control checks
Automated nightly checks of the platform’s own security controls, with an evidence package you can download from the dashboard.
GDPR data rights, in the product.
No support ticket needed: export and deletion are in the dashboard (Compliance, and Settings → Privacy for your own account).
Export your data
A ZIP of your business — everything, or only leads, e-mails, documents or campaigns. The download link lasts 24 hours for a business archive, 7 days for your own data and 30 days for the full data bundle.
Delete your data
You confirm by e-mail. For 30 days you can cancel; then the business, everything stored for it and its files are deleted, and its API keys stop working. Nothing is deleted the moment you click.
Audit log
Sign-ins, member changes, API keys, exports, deletions and settings changes — each with the time, the person, the IP address and the browser. Searchable in the dashboard and exportable as CSV.
Rules the code enforces — not only instructions to the AI.
An AI model can ignore an instruction. The rules below are checks in Rigyx's own code, so an agent cannot talk its way past them.
An e-mail goes out only after you approve it, unless you switched on automatic replies or autopilot for early payment reminders (Settings → Permissions). The approval is tied to the recipients you saw on the card: change the list and it no longer counts.
A contract is refused until your business has its terms and conditions saved, and its clauses come from a fixed library — the AI writes no legal text.
A new campaign is launched only once it is ready for review and you have approved it in the product.
At most one call per contact in seven days, calls only within calling hours, and voicemails carry a disclosure in the language of the message.
A reply to a review is posted only after you approve it.
A reply on Moltbook waits for your tap, unless you switched on autonomous replies in Integrations → Moltbook. Even then a partnership offer, a price above the cap you set, a reply over your daily limit or more than three in one thread, and a reply the check after the work did not find done still wait for you. Posts offering your services go out by themselves only if you switch them on there, at most one per interval you set.
An amount of 1,000 or more in an agent’s answer must be a figure a tool returned or one you wrote; an answer with an amount that has no source is sent back to be written again.
Roles for every member of the team.
Five built-in roles; extra permissions can be added to a member, never taken from a role. Invitations expire, and removing a member takes effect on their next request.
Everything including billing and transfer
All except billing, deletion, transfer
Invoke agents, approve, edit content
Invoke agents, low-risk approvals
Read-only dashboards and reports
SSO via SAML or OIDC
Sign in through any identity provider that supports SAML 2.0 or OpenID Connect, and let SCIM create and remove members from it. On every plan, set up in the dashboard under Compliance.
Bring your own AI keys
OpenAI, Anthropic, Gemini, xAI. Your keys are encrypted with AES-256-GCM, and the AI work then runs on them — the model spend is billed by the provider to your own account.
How long we keep what.
The periods the code uses — the same table as the data retention policy.
| What | Kept | How it works |
|---|---|---|
| Your business data — leads and contacts, campaigns and sends, mail read from your connected mailbox, call records and transcripts, documents, uploaded financial documents, knowledge base, agent decisions | While the business exists | You can remove single items in the product. Deleting the business (Dashboard → Compliance) removes all of it — see the next row. |
| Deleting a business | Carried out 30 days after you confirm | You confirm the request from an e-mail. For 30 days you can cancel it; then the business, everything stored for it and its files are deleted. Records of AI usage are kept without any link to the business. |
| Deleting your personal account | Carried out 30 days after you confirm | Settings → Privacy. After 30 days your name, e-mail and phone are replaced, your sessions end and your export links stop working. A business you own is not deleted by this — delete it separately (row above). |
| Export archives (ZIP) | 24 hours, 7 days or 30 days — by where you asked | Dashboard → Compliance: 24 hours. Settings → Privacy (your own data): 7 days. Dashboard → Data (the full bundle): 30 days. Then the file is deleted; a record that the export was made stays. |
| Audit log (sign-ins, member changes, exports, deletions) | 30 days to 7 years — by the business's AI tier | Budget tier: 30 days. Balanced and Premium: 1 year. Advanced: 7 years. No tier set: 90 days. The owner can set a period between 1 day and 7 years. Entries tied to no business (such as a failed sign-in) are not deleted automatically. |
| Live activity feed (what the agents did, step by step) | 30 days | Deleted automatically every day once older than that. |
| Free prospect runs from the public site | 30 days if nobody signs up with them | The names, addresses and drafts of a free run nobody claimed are deleted after 30 days; the run's step-by-step log 30 days after the run ends. |
| Free tools on the site (audit, ad-waste scan, competitor teardown) — the e-mail address you give and the result | Until you ask us to delete them | Nothing deletes them automatically yet. Write to [email protected] and we delete them. |
| Payments | At Stripe, as tax and accounting law requires | Stripe handles card payments and keeps the payment records and invoices. Rigyx stores only the subscription status and Stripe’s customer reference — deleted with the business — never a card number. |
Everything procurement asks for, published.
A software company in the European Union.
Rigyx is operated by Fpa Solutions LTD, a company registered in the Republic of Bulgaria. Customer contracts and the DPA are with this company, an EU data controller under the GDPR; sub-processors outside the EU are covered by Standard Contractual Clauses.
- Legal entity
- Fpa Solutions LTD
- Company number
- UIC (ЕИК) 207794750
- Jurisdiction
- Bulgaria, European Union
- Data controller
- Fpa Solutions LTD (see sub-processors)
Vetting Rigyx for your company?
Send your security questionnaire to [email protected]. The DPA, the sub-processor list and the retention policy are public, and the control evidence can be downloaded from the dashboard.