ricochet

Ricochet Privacy Policy

Last updated: 17 September 2026

Ricochet is a product of RICOCHET, LLC, a Washington-based company. This privacy policy covers ricochet.rs, the portal at cloud.ricochet.rs, self-hosted license accounts, and Ricochet Cloud hosting, administration, and billing. RICOCHET, LLC is responsible for the account and service administration data described here.

Topics

What data do we collect?

ricochet.rs does not ask you for any personal data, and you can read every page of it without giving us any. We count page views only if you accept analytics cookies, which is described under Analytics.

When you create an account to purchase or manage a license or Cloud service, we collect:

  • Your name, email address, account identifier, profile image where supplied, and timezone preference.
  • Organization names, memberships, roles, invitations, and service settings supplied by you or your organization’s administrators.
  • Instance details, selected resources, metered usage, subscription and transaction identifiers, payment status, and relevant invoice and billing information.
  • Authentication and administrative audit events used to secure accounts and record service changes.
  • Contact details and information you send when requesting support.

Paddle, our merchant of record, collects and processes payment details through its checkout. We exchange customer, subscription, transaction, and invoice information with Paddle to administer your service. If you request invoice billing, we also collect the company, billing address, tax identification, and billing contact information you submit through the portal. We do not receive your full payment-card details through this integration.

How do we collect your data?

You directly provide us with the data we collect. We collect data when you:

  • Register for an account or purchase a license or Cloud service.
  • Configure organizations and instances, select resources, deploy content, or request support.
  • Use or view our websites, through cookies and through the analytics described below.

We also receive information from the identity provider used to sign in, administrators who invite you or manage your access, and Paddle when purchases or subscriptions change. Cloud authentication uses ZITADEL, and your organization’s configured identity provider may supply your profile and sign-in information.

How will we use your data?

We use your data so that we can:

  • Create and manage your account, license, organizations, and Cloud instances.
  • Control access to your organization’s services, operate hosted workloads, and respond to support requests.
  • Measure selected capacity, calculate usage charges, and reconcile payments and invoices.
  • Maintain audit records, investigate errors, and protect the service against unauthorized use.
  • Communicate with you about your account, service, subscription, trial, usage budget, and license.

We do not sell your personal data. We use service providers for hosting, storage and backups, service communications, payments, and optional website analytics as needed to provide these services. Paddle processes payment information under its privacy notice, including for tax administration and fraud prevention. PostHog processes optional website analytics as described below. Your organization’s administrators can see membership, service, usage, and relevant audit information needed to manage the organization.

How do we store your data?

We store your data on servers located in Germany, operated by Hetzner.

We retain account and service records while needed to operate your license or Cloud service, maintain security, resolve disputes, and meet recordkeeping obligations. Ending a subscription does not immediately erase invoices, payment records, or administrative audit records. Cloud instance data may remain during the service’s retention period after cancellation, and backup copies may remain until their retention period expires. Contact us for the retention details applicable to your service and assistance with deletion. We respond to personal-data requests within one month, subject to extensions permitted by applicable law, and explain any information we must retain.

Customer content on Ricochet Cloud

Ricochet Cloud stores and processes the code, documents, datasets, and other content that you deploy to deliver the hosting service. Your organization determines what personal data it includes in that content and who can access it. We process hosted customer content on that organization’s instructions to provide, maintain, and secure the service. Direct privacy requests concerning data inside a customer’s hosted app or document to that organization first. Contact [email protected] for data processing questions or help exporting or deleting hosted data.

Marketing

We do not currently collect or use your data for marketing purposes.

What are your data protection rights?

Ricochet would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

The right to access. You have the right to request Ricochet for copies of your personal data.

The right to rectification. You have the right to request that Ricochet correct any information you believe is inaccurate. You also have the right to request Ricochet to complete information you believe is incomplete.

The right to erasure. You have the right to request that Ricochet erase your personal data, under certain conditions.

The right to restrict processing. You have the right to request that Ricochet restrict the processing of your personal data, under certain conditions.

The right to object to processing. You have the right to object to Ricochet’s processing of your personal data, under certain conditions.

The right to data portability. You have the right to request that Ricochet transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us:

  • Email us at: [email protected]
  • Or write to us at: RICOCHET, LLC, 522 W Riverside Ave, Ste N, Spokane, WA 99201, United States

Analytics

On ricochet.rs, we count page views with PostHog, on their European Union hosting, so that we can see which pages need work. We do not use this for advertising. The Cloud portal does not currently use PostHog analytics.

Website analytics stays disabled until you accept. Decline or ignore the website’s banner and no analytics page views are recorded. Use Cookie settings in the ricochet.rs footer to change your choice. Cloud usage metering and security audit records are necessary to operate the service and do not depend on website analytics consent.

PostHog processes this data on our behalf. Their privacy policy covers how they handle it.

What are cookies?

Cookies are text files placed on your computer to collect standard internet log information and visitor behavior information. When you visit our websites, we may collect information from you automatically through cookies or similar technology.

For further information, visit allaboutcookies.org.

How do we use cookies?

We use cookies to:

  • Keep you signed in.
  • Remember your previously selected display preference.
  • Count page views, if you accepted analytics cookies on the banner.

We never use cookies for advertising.

What types of cookies do we use?

Our websites use cookies and browser storage for the following purposes:

  • Functionality. Used to remember your previously selected display preference.
  • Session. We may use a cookie to keep you signed in to your account.
  • Analytics. Set only if you accept, and used to tell a returning reader from a new one, as described under Analytics. Decline and no analytics cookie is set and no page views are counted.

The first two are strictly necessary and are set without asking you. The analytics cookie is set only with your consent.

How to manage your cookies

You can set your browser not to accept cookies, and the website above tells you how to remove cookies from your browser. However, in a few cases, some of our website features may not function as a result.

Privacy policies of other websites

Our websites contain links to other websites. Our privacy policy applies only to our own websites, so if you click on a link to another website, you should read their privacy policy.

Changes to our privacy policy

Ricochet keeps its privacy policy under regular review and places updates on this page. The date at the top identifies the latest update.

How to contact us

If you have any questions about Ricochet’s privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us.

  • Email us at: [email protected]
  • Or write to us at: RICOCHET, LLC, 522 W Riverside Ave, Ste N, Spokane, WA 99201, United States

How to contact the appropriate authority

Should you wish to report a complaint or if you feel that Ricochet has not addressed your concern in a satisfactory manner, if you are located in the EU, EEA, or UK, you may contact the data protection authority in your country of residence.