This policy explains what information ResolveRight collects when you use the service, how we use it, and the rights you have over it. If you have any questions, please contact us at privacy@resolveright.io.
1. Who we are
ResolveRight is operated by Arrival Consulting Limited (“ResolveRight”, “we”, “us”). We provide a SaaS tool that helps MSP engineers generate and deliver professional ticket-closure messages.
2. Information We Collect
We collect the minimum data needed to run the service:
- Account information — name, email address and authentication details (handled by Clerk).
- Workspace settings — your company name, support contact details, preferred tone and checklist configuration.
- Product usage — anonymised events such as which templates you use most, captured via PostHog.
- Billing — subscription status, plan and invoice history, handled by Paddle.
3. How We Use Your Data
We use your data to:
- Run, secure and improve the ResolveRight service.
- Personalise the app to your workspace and preferences.
- Send you essential service notifications (e.g. billing, security).
- Respond to support requests.
3A. AI Processing and Data Retention
When you use AI Mode, your engineer notes are sent to Anthropic's API to generate a message. ResolveRight does not store your notes or the generated message after it has been delivered to your browser. Your data is never used to train AI models — Anthropic's API terms prohibit this.
4. Data Sharing
We share data only with the sub-processors required to deliver the service: Clerk (authentication), Supabase (database hosting), Anthropic (AI inference for AI Mode), PostHog (product analytics), Paddle (billing), and Vercel (application hosting). We never sell your data.
5. Secure Credential Delivery
When you create a Secure Link, the content you send is encrypted with AES-256-GCM before it is stored. The link self-destructs after the configured number of views or its expiry, whichever comes first. Once destroyed, the ciphertext is removed from our database and cannot be recovered.
6. Data Retention
Account and workspace data are retained for as long as your subscription is active. If you delete your account or workspace, we remove your data within 30 days, except where retention is required for legal, accounting or fraud-prevention purposes.
7. Your Rights
Subject to UK GDPR, you have the right to access, correct, port and delete the personal data we hold about you, and to object to certain processing. To exercise any of these rights, email privacy@resolveright.io.
8. Security
We use industry-standard transport and at-rest encryption, scoped service-role access keys for database operations, and audited third-party providers for authentication and billing. No system is perfectly secure; please report any concerns to security@resolveright.io.
9. Changes to This Policy
We may update this policy from time to time. Material changes will be announced in-app or by email. Continued use of the service after a change indicates acceptance of the updated policy.