Where your data lives, and how you leave with it.

Where the data lives

• One managed database. Your workspace lives in Supabase's managed Postgres, which is where sign-in lives too. The app and this site are served by Vercel, which handles the request and holds none of your records.
• Encrypted in transit and at rest. Every connection is HTTPS and the site is served under a strict transport policy, so a browser will not fall back to an unencrypted one. The database is encrypted where it sits.
• Separated by workspace. Each workspace's data is kept separate from every other workspace's.

Who can see it

• Your people, at the level of their role. Owner, manager, administrator and rep each see a different amount, and money figures in particular are held to the roles that are meant to have them.
• The other companies involved. The privacy page lists the companies we use to run Rillo, and what each one gets.
• Changes are written down. The workspace keeps an audit trail of administrative actions, including who exported it and when.
• Rillo's own people. Rillo is a small company in Phoenix. A person here can reach a workspace to fix a fault or answer a support request, and does so only for that. Rillo does not read your book for any other reason, and nobody at Rillo sells or shares what is in it.
• What sends on its own. Rillo asks before it sends anything it writes for you; messages you switch on, like booking confirmations, send on their own.

What the AI does with it

• It drafts from your own records, for your yes. When you ask Rillo a question, or it drafts a note, a reply or a quote, the AI model reads the records it needs to write it. Nothing it writes sends on its own.
• Which models. Rillo's AI runs on outside AI models, each named on the privacy page with what it gets. A backup model takes text only, and Gmail and Outlook text goes to one provider only.
• Never training data. No AI provider Rillo uses trains on your records, and Rillo does not use them to train a model.

Backups, and getting out

• Backups are the platform's. The database is backed up by Supabase's managed backups rather than by a script Rillo wrote, which is the honest answer and the safer one.
• Your own copy, on demand. Managers, admins and owners can download the CRM workspace from Settings as one file. No request, no waiting, no reason needed, and you can take it while you are still a customer.
• Leaving is the export plus a sentence. Take the export, then email Rillo support from the address that owns the workspace and ask for it to be deleted. Nothing is held hostage and there is nothing to negotiate.

If something goes wrong

• You will be told. If customer data is exposed, Rillo tells the affected account owners what happened, what was involved and what to do, without waiting to have a complete picture first.
• Report one and it is read. A security problem found in good faith goes to Rillo support, and we respond as quickly as we can. Sending one is welcome and nobody is going to be threatened for it.
• An outage is a different thing. If the service is down, status says how to reach a person.

What Rillo does not claim

• No certification or audit. Rillo holds no SOC 2, no ISO 27001, no HIPAA attestation and no PCI certification of its own, and has not been audited by anyone. If a badge appears on a page about this product, it is not Rillo's. Card details never touch Rillo: Stripe takes them.
• No claim to be a regulated system of record. Rillo is not your LOS, your carrier system, your ATS of record or your accounting system. It sits alongside them and holds what you put into it.
• If you need more than this. A buyer who needs an agreement, a questionnaire answered or a review before purchase should write to Rillo support and say so. The answer will be whatever is true, including no.

What Rillo holds, by trade

One line each, for the nine industries the CRM ships presets for.

Last updated 7 October 2026. Rillo LLC, Phoenix, Arizona. Questions to Rillo support. See also privacy and the terms.