Legal

Security at Rio

Your information is part of the product. Protecting it is part of the job.

Rio can hold information about your tasks, calendar, notes, documents, habits, and other commitments. It may also connect to services you already use.

We design Rio with that responsibility in mind.

Protecting your data

Rio uses security controls designed to protect information while it is transmitted, stored, and processed.

Account security

Rio uses authenticated accounts and session controls designed to prevent unauthorized access.

Connected services use supported authorization mechanisms such as OAuth where applicable, so users do not need to give Rio their third-party passwords.

Connected accounts

When you connect another service to Rio, we request permissions required for the functionality you choose.

We aim to request only the access necessary to provide those capabilities.

You can revoke connected-account access through Rio or the provider where supported.

AI and your information

Some Rio features require relevant information to be processed by AI models.

We limit the information provided to those systems based on what is needed to complete the user’s request and the architecture of the feature.

Our Privacy Policy explains this processing in more detail.

Access to production information

Access to production systems and user information should be limited to people who require it for legitimate operational purposes.

Administrative access should be authenticated, logged where appropriate, and removed when it is no longer required.

Secure development

We incorporate security into development through practices such as code review, dependency management, environment separation, secret management, monitoring, and testing.

Monitoring and incident response

We monitor Rio’s systems for operational and security issues and maintain processes for investigating incidents.

If an incident materially affects users or their information, we will provide notifications as required by applicable law.

Data deletion

Users should be able to delete information and, where supported, their account.

Our Privacy Policy explains retention and deletion in more detail.

Report a security issue

If you believe you have discovered a security vulnerability in Rio, please report it privately.

security@meetrio.ai

Please include enough information for us to reproduce and investigate the issue.

Do not access, modify, or download other users’ information while conducting security research.