RRIDA Privacy Policy
Last updated: 21 September 2026
Published at: rrida.com/privacy
RRIDA is a product of Clover ERA Inc. This policy explains what personal data RRIDA handles, why, and what you can do about it. It is written for three groups of people: visitors to rrida.com, managers who hold a RRIDA account, and team members who answer RRIDA's questions.
1. In short
- Team members' answers are anonymous. Managers see results for the team as a whole and never for a person.
- We do not sell personal data. We do not use it for advertising.
- rrida.com uses no tracking cookies.
- Eran, the AI coach, is there to help a manager think and act. RRIDA does not make decisions about anyone.
- You can ask to see, correct or delete the personal data we hold about you.
2. Who we are
Clover ERA Inc. is a Delaware corporation at 1201 North Market Street, Suite 111-M77, Wilmington, DE 19801, USA. For data protection law, Clover ERA Inc. is responsible for the personal data described in this policy, in the roles set out in section 4.
Privacy contact and Data Protection Officer: [email protected], subject line "DPO".
Our representative under Article 27 GDPR and UK GDPR is Neil Hays, contactable at [email protected].
3. What this policy covers
This policy covers the website at rrida.com, the sealed read, the RRIDA web application, any RRIDA mobile apps, and Eran. Other Clover ERA products have their own policy at cloverera.com/privacy.
4. Our role
For visitors to rrida.com, for account and billing data, and for our own communications with you, we are the controller. We decide why and how that data is used.
When a manager uses RRIDA for their work, the manager's organisation decides to bring RRIDA to its team. For the content that the manager and the team put into RRIDA (answers, goals, conversations with Eran), we act as a processor on the organisation's behalf, and the organisation is the controller. A Data Processing Addendum is available on request.
One thing does not depend on who the controller is. The anonymity commitments in section 7 are made by us, directly, to every team member. We will not set them aside at a customer's request.
5. What we collect
5.1 Visitors to rrida.com
The sealed read. If you answer the question on our homepage, we store the face you chose and, when you pick one of the reasons we offer, which one you picked. If you write your own words instead, those words are never sent to us: we store the face alone. With it we store the moment you sealed it, the read number we generate for you, the campaign tag in the link you followed if it had one, and, if you arrived through another manager's share link, the read number that link belongs to. We do not ask who you are. We do not store your IP address with your read. We store nothing at all on your device, which is why you never saw a cookie banner. Once sealed, a read cannot be edited by you or by us.
Your email address, if you ask us to send your sealed read to you, if you start a trial, or if you join the waiting list before RRIDA opens. A waiting list address is stored with the page you gave it on and nothing else, it is used only to tell you the day RRIDA opens, and you can ask us to remove it at any time.
When you seal a read, we store your answer with no information that identifies you. If you then give us your email, we hold your sealed read against that email until you ask us to delete it, which you can do by replying to any message from us.
Server logs. Like most websites, our servers briefly record technical details of each request, such as IP address, browser type and time, for security and to keep the service running. Logs are kept for 30 days.
Analytics. We count page views and a small number of actions: which face was chosen, whether a reason was picked, whether a trial button was pressed, and how far down the page you scrolled. Counting happens on our own server, which stores the count in our database. We use no third-party analytics service, nothing is stored on your device, and no identifier, cookie or IP address is kept with a count, so these numbers cannot be linked to you or to each other.
5.2 Managers
- Account details: name, work email, company, and a protected (hashed) form of your password.
- Set-up information: team names, team goals, and your own read of how your team is doing.
- Conversations with Eran: what you type and what she replies, and the actions you choose to take or skip.
- Usage data: when you sign in and which features you use.
- Billing details if you subscribe: billing contact and a payment token from our payment processor. We never see or store full card numbers. No payment details are collected for the trial.
5.3 Team members
- Your answers: the face you choose, the reason you choose, any words you type, and the date.
- What we need to reach you: Nothing. You join with a team code, and we do not know who you are. No personal data of any kind is recorded and no device identifier is ever taken.
Answers are linked to a team code and to nothing else. They carry no name, no email address, no account identifier and no device identifier, which is why they can only ever be reported for a team.
5.4 Anyone who contacts us
If you email us or fill in a form, we keep the exchange so we can reply and keep context.
6. How we use personal data, and our legal bases
| Purpose | Data | Legal basis (GDPR and UK GDPR) |
|---|---|---|
| Provide RRIDA: accounts, team readings, Eran, the sealed read | Account, set-up, answers, conversations | Performance of our contract with the manager or their organisation. For visitors' sealed reads: our legitimate interest in providing the feature you chose to use |
| Send service messages, such as your sealed read link, trial information and security notices | Email address | Contract, and legitimate interest |
| Tell you the day RRIDA opens, if you joined the waiting list | Email address | Consent. You can withdraw it at any time |
| Send product news | Email address | Consent. You can withdraw it at any time |
| Keep RRIDA secure and prevent abuse | Logs, usage data | Legitimate interest |
| Improve RRIDA and publish research, using anonymous, aggregated data only | Aggregated data that identifies no person or company | Legitimate interest |
| Billing, tax and legal compliance | Billing and account records | Legal obligation |
We do not sell personal data. We do not use it for advertising. We do not use it to make automated decisions that have legal or similarly significant effects on anyone.
7. Anonymity for team members
RRIDA only works if people can answer honestly. These are our commitments:
- Team level only. Managers see readings, states and reports for the team as a whole. RRIDA never shows a manager an individual's answers.
- Minimum team size. RRIDA does not produce a reading until at least 3 team members have answered, so that one person's answers cannot be worked out from a small group.
- Eran does not name people. Eran will not identify, or guess at, which team member gave any answer.
- Your employer cannot get your answers from us. This is not a promise to refuse a request. No answer is ever recorded against a person, only against a team, so there is nothing for us to hand over.
- Managers agree not to try. Our Terms of Service forbid any attempt to identify who gave an answer, and we may close an account that tries.
A note on your own words. If you type an answer in your own words, write it so that it does not identify you or anyone else. We cannot remove identifying details that you choose to include.
8. Eran and artificial intelligence
Eran is an AI coach for the manager. To produce her replies, RRIDA sends the relevant context to an AI model operated by one or more of Anthropic (Claude), OpenAI (ChatGPT) and xAI (Grok), acting as our sub-processors. The model in use for Eran today is Anthropic's Opus 5. That context includes the manager's messages and the team-level picture. It does not include any individual team member's identity.
- Our agreement with the provider prohibits it from using this data to train its models.
- Eran's output is a suggestion to a manager. It is not a decision about any person, and our terms forbid using RRIDA as the basis for decisions about an individual's employment.
- Managers sometimes mention colleagues when asking Eran for help. We ask managers to share only what they need to and never to enter sensitive information about another person. If you believe a manager has entered information about you, you can contact us or your employer to exercise your rights.
- Eran can make mistakes.
9. Who we share data with
We share personal data only in these cases:
Service providers (sub-processors) that help us run RRIDA, each under a written data processing agreement:
| Provider | What it does | Where |
|---|---|---|
| Microsoft Azure | Hosting and database | USA |
| Anthropic, OpenAI or xAI | AI model for Eran, currently Anthropic Opus 5 | USA |
| Microsoft 365 | Sending service emails | USA |
| Stripe | Payments, for subscribers only | USA |
| Supabase | Storing sealed reads, the waiting list and anonymous page counts | EU (Frankfurt) |
| Vercel | Serving rrida.com and running its API | API in the EU (Frankfurt); Vercel Inc. is US-based |
Legal reasons. Where the law, a court order or the protection of someone's safety requires it.
Business transfers. If Clover ERA Inc. is merged or acquired, data may pass to the new owner under the same commitments. We will tell account holders.
Anonymous research. We may publish findings drawn from aggregated data. No person or company can be identified from them.
10. International transfers
Clover ERA Inc. is based in the United States, and your data may be processed there and in the locations listed above. For personal data from the EU, the UK and Switzerland, we rely on the European Commission's Standard Contractual Clauses, and the UK International Data Transfer Addendum.
11. How long we keep data
| Data | How long |
|---|---|
| Sealed read with no email and no account | Kept in anonymous form. It identifies no one |
| Sealed read with an email but no account | 12 months, then the email is deleted and the anonymous read is kept |
| Account data during a trial or subscription | For as long as the account is active |
| Account data after a trial ends with no subscription | 90 days, then deleted or anonymised |
| Account data after a subscription ends | 12 months, then deleted or anonymised |
| Conversations with Eran | For the life of the account, so that she remembers what you have tried. Deleted with the account, or earlier on request |
| Team members' answers | Always kept only as anonymous team-level aggregates. No answer is ever recorded against a person |
| Waiting list address | Until RRIDA opens and we have written to you, then deleted within 30 days |
| Emails and support messages | 36 months |
| Billing records | 7 years, for tax and accounting law |
| Server logs | 30 days |
12. Your rights
Depending on where you live, you have the right to:
- see the personal data we hold about you and receive a copy;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to how we use it;
- receive your data in a portable format;
- withdraw consent where we rely on it;
- complain to your data protection authority. In the UK this is the Information Commissioner's Office (ico.org.uk). In the EU it is the authority in your country.
California residents have the right to know what personal information we collect, to have it deleted and corrected, and not to be discriminated against for using these rights. We do not sell or share personal information as those terms are defined in California law.
Sealed reads. You can ask us to delete a sealed read linked to your email or account. A sealed read cannot be corrected or edited, since being fixed is its purpose. We will delete it instead.
Team members. Where your answers are held in a form that cannot be linked to you, we are unable to find, extract or delete them for you as an individual, and the law does not require us to re-identify you to do so. For anything we hold that can be linked to you, the rights above apply.
To use any of these rights, email [email protected]. We reply within 30 days. If we process your data on behalf of your employer, we may need to pass your request to them.
13. Security
We protect data with encryption in transit and at rest, role-based access controls, separation of environments, and regular review of our security. No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant authorities as the law requires.
14. Cookies and local storage
rrida.com sets no advertising or tracking cookies, which is why you see no cookie banner. We use:
- a token in your browser's local storage, only if you seal a read, so that the site can recognise it when you return;
- a sign-in cookie in the RRIDA application, which is strictly necessary to keep you logged in.
You can clear either at any time in your browser settings.
15. Children
RRIDA is a workplace product for adults. It is not directed at anyone under 18, and we do not knowingly collect their data. If you believe we have, contact us and we will delete it.
16. Changes to this policy
We will update this policy as RRIDA changes. We will email account holders about material changes before they take effect. The date at the top shows the latest version, and earlier versions are available on request.
17. Contact
Clover ERA Inc.
1201 North Market Street, Suite 111-M77
Wilmington, DE 19801, USA
Email: [email protected]