Privacy

Right Question, LLC ("Right Question", "we", "us") is an AI discovery and implementation consultancy, registered at 30 N Gould St, Ste R, Sheridan, WY 82801, United States, and operated from the European Union. We are the controller of the personal information described here. This policy covers the client portal at portal.rightquestion.ai (the "Portal"). Our website has its own privacy policy.

The Portal is invite-only. Right Question creates every account; nobody can register themselves.

We hold the following about you:

• Your name and email address.
• Which client and which projects you can see.
• Sign-in records and IP addresses, in authentication logs.
• Messages you send us through the Portal.

We use this information to give you access to the material we share with your organization, to sign you in and keep the Portal secure, and to answer your messages. Our legal basis is the steps taken at your request before or under a contract, and our legitimate interest in running the Portal securely.

We do not sell your personal information, and we run no advertising or analytics trackers in the Portal.

We use these providers, each limited to what its job needs:

• Supabase: database, authentication and file storage, hosted in Frankfurt, Germany.
• Vercel: hosting. The Portal's functions run in Frankfurt.
• Mailjet: email delivery, for sign-in codes and for messages you send us.

We operate from the European Union, and some of our providers are in the United States. When personal information goes to the United States, it is protected by the provider's certification under the EU-US Data Privacy Framework or by the European Commission's Standard Contractual Clauses in our agreement with that provider.

The Portal sets only the essential cookies that keep you signed in. It sets no analytics and no advertising cookies, so there is no cookie banner.

A sign-in session ends after 7 days without use, and in any case after 30 days. You can sign out at any time from the header.

Messages you send through the Portal: 24 months after our last contact with you. If you become a client, we keep what our contract and tax obligations require.

Account details: for as long as you have access to the Portal. Authentication logs: kept only as long as needed to run and secure the Portal.

Depending on where you live, you can ask to access, correct, delete or export your personal information, to restrict or object to how we use it, and to withdraw any consent at any time. To do so, email hello@rightquestion.ai and we will respond within one month. If you are in the EU or UK, you can also complain to a data protection authority, for example the one in the country where you live.

The Portal is for business use and is not directed to anyone under 16.

No method of transmission or storage is completely secure, but we collect as little as possible and limit who can see it.

• Access is by invitation only.
• You sign in with a 6-digit code sent to your email.
• Each client's material is kept apart from every other client's in the database itself, not only in the application.
• Data is encrypted in transit.
• The Portal is hosted in the European Union.
• The operator's own account is protected by an authenticator app.

We update this policy as the Portal changes and show the revision date at the top.

Right Question, LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, United States. hello@rightquestion.ai.