Security

How we handle your data.

Assessment answers can include nationality, income, family situation, and immigration history. This page explains the launch standard for how that data is protected.

EU data residency

Application data is designed to be stored and processed in the EU, with Frankfurt-based database infrastructure at launch.

Encryption

Data is encrypted in transit and at rest. Report downloads should use time-limited signed URLs, not public files.

Restricted access

Production data access is limited to active founders and revoked when no longer needed.

Retention

Raw assessment inputs should be deleted after 24 months. Aggregated anonymous outcome data may be retained for scoring improvement.

Payments

Stripe handles payment card data. ReloClear stores transaction references, report status, VAT details, and receipt metadata only.

User rights

Users can request access, correction, export, or deletion of personal data under GDPR.