Privacy

How we collect, use, and protect personal information in Rilla Docs.

TAYGA LABS LIMITED

Rilla Docs - docs.rilla.network

In this Privacy & Cookie Policy (“Policy”), the expressions “we”, “us”, “our”, “Rilla Network” and “Rilla” refer to Tayga Labs Limited (company number 9063298), a company incorporated in New Zealand, with offices at 2 Chancery Street, Auckland 1010, New Zealand. Tayga Labs Limited operates the Rilla Network brand and the Rilla documentation portal at docs.rilla.network (“Rilla Docs”).

This Policy explains how we collect, use, disclose, and protect personal information when you access and use Rilla Docs. Rilla Docs is a gated platform available exclusively to authorised personnel of organisations that have entered into a valid Non-Disclosure Agreement or commercial agreement with Rilla Network. It is not accessible by the general public. By accessing Rilla Docs, you confirm that you have read and understood this Policy. Access to Rilla Docs is further governed by the Rilla Docs Terms of Use, which should be read in conjunction with this Policy.

We comply with applicable data protection and privacy laws in the territories in which we operate, including the New Zealand Privacy Act 2020 and, where applicable, the EU General Data Protection Regulation (“GDPR”), UK GDPR, and other relevant frameworks. We only collect, use, and share your personal information where we have a lawful basis to do so - including for the performance of a contract with you or your organisation, to comply with legal obligations, or where we have a legitimate interest in doing so.

1. Scope and Relationship to Other Policies

This Policy applies solely to personal information collected in connection with access to and use of Rilla Docs at docs.rilla.network. It does not apply to:

the public Rilla Network website at rilla.network, which is governed by a separate Privacy & Cookie Policy;
data collected via Rilla’s SDK or services integrated by customers into their own applications - the collection and processing of end-user data via those services is addressed in Rilla’s Data Processing Agreement (“DPA”), which governs the relationship between Rilla Network and its enterprise customers as data processor and data controller respectively; or
information you provide to your own organisation’s systems.

Rilla Docs is a business-to-business platform. The individuals whose personal information we collect in connection with Rilla Docs are employees, contractors, or authorised representatives of our enterprise customers - not consumers accessing services in a personal capacity.

2. Information We Collect

When your organisation is onboarded to Rilla Docs, we collect information necessary to establish and manage your access, including:

your name and work email address (used to authenticate and grant access to Rilla Docs);
your organisation name and role;
records of access provisioning and any access revocations.

When you access and use Rilla Docs, we may automatically collect:

your IP address, browser type, operating system, and device information;
pages visited, navigation paths, time spent on pages, and interactions within Rilla Docs;
referring URLs and exit pages;
session duration and frequency of access;
error logs and diagnostics relating to the performance of Rilla Docs.

This data is collected through server logs and third-party analytics tools (detailed further in sections 4 and 5 below) and is used to maintain, secure, and improve Rilla Docs.

If you contact us via email or through Rilla Docs, we will collect and retain the contents of your communication and any personal information you choose to include, for the purpose of responding to your enquiry or providing support.

We do not collect personal information for marketing or advertising purposes through Rilla Docs. We do not use marketing cookies, serve targeted advertising, or use tracking technologies to build advertising profiles in connection with Rilla Docs.

3. How We Use Your Information

We use the information we collect for the following purposes:

to grant, manage, and administer your access to Rilla Docs, including verifying your eligibility and maintaining access records;
to provide technical support and respond to enquiries or requests submitted through Rilla Docs;
to monitor, maintain, and improve the performance, security, and functionality of Rilla Docs;
to analyse usage patterns and understand how Rilla Docs is being used, in order to improve its content and user experience;
to detect and prevent unauthorised access, security incidents, or breaches of the Rilla Docs Terms of Use;
to communicate with you in connection with Rilla Docs, including notifying you of material updates to documentation, Rilla Docs features, or these Terms;
to meet our internal record-keeping and administrative requirements; and
to comply with applicable legal and regulatory obligations.

We do not use personal information collected via Rilla Docs to send you unsolicited marketing communications. Any communications we send to Rilla Docs users are transactional or service-related in nature.

4. Cookies & Tracking Technologies

Rilla Docs uses cookies and similar technologies to support functionality, maintain session state, and collect analytics data. By using Rilla Docs, you acknowledge and accept our use of these technologies as described in this section. Rilla Docs does not deploy marketing or advertising cookies.

The categories of cookies used on Rilla Docs are:

4.1 Essential Cookies

These cookies are strictly necessary for Rilla Docs to function. They enable authentication, maintain your session, and support access control. Without these cookies, Rilla Docs cannot operate. Essential cookies do not require your consent and cannot be disabled.

4.2 Analytics Cookies

Google Analytics: We use Google Analytics to collect aggregated, anonymised data about how Rilla Docs is accessed and used. This may include pages visited, session duration, referral source, and general geographic location derived from IP address. IP addresses are anonymised before storage. We use this data solely to understand and improve the performance of Rilla Docs and user experience.

Hotjar: We also use Hotjar on Rilla Docs to collect behavioural analytics, including session recordings, heatmaps, and scroll behaviour. Hotjar data is used to identify usability issues and improve content presentation. Please note that by the nature of session recording technology, Hotjar session data may contain personal information if you enter identifiable data during a recorded session. We configure Hotjar to suppress sensitive form fields where possible.

You can opt out of Google Analytics tracking at any time using Google’s opt-out tool: https://tools.google.com/dlpage/gaoptout. You may also manage analytics cookie consent on Rilla Docs at /tracking-consent/, or through your browser settings. Disabling essential cookies may prevent you from accessing Rilla Docs. Disabling analytics cookies will not affect your ability to use Rilla Docs Content.

5. Third-Party Services

We use a small number of trusted third-party service providers in connection with Rilla Docs, including cookies and analytics services, and cloud infrastructure and hosting services. These providers may process personal information (including access logs and server-side data) on our behalf as data processors, under appropriate data processing agreements where applicable.

We do not sell, rent, or license your personal information to any third party. We may share your personal information in the following limited circumstances:

with our third-party service providers, solely to the extent necessary to provide Rilla Docs and the services described in this Policy, and under appropriate contractual obligations;
with governmental, legal, regulatory, or other authorities where required by applicable law, court order, or regulatory requirement. Where we receive such requests, we will carefully validate their legitimacy before disclosing any information;
in connection with a merger, acquisition, restructuring, or sale of all or substantially all of our assets, provided that the receiving party agrees to treat your personal information in accordance with this Policy; and
with your express consent, or at your direction.

7. International Data Transfers

Personal information collected through Rilla Docs may be stored and processed in countries outside your own, including New Zealand, the United States, and other countries where our third-party service providers operate.

New Zealand has been recognised by the European Commission as providing an adequate level of personal data protection. Where we transfer personal information from within the EU or UK to third-party processors located in other countries, we will implement appropriate safeguards, which may include:

EU Standard Contractual Clauses (SCCs);
the UK International Data Transfer Agreement (IDTA) or UK Addendum to the EU SCCs;
reliance on the EU-US Data Privacy Framework (and its UK Extension) where applicable; or
other lawful transfer mechanisms as recognised under applicable law.

We take appropriate steps to ensure that transfers of personal information are carefully managed to protect your privacy rights and interests.

8. Data Retention

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, to maintain records of your organisation’s access to Rilla Docs, and to comply with applicable legal and regulatory obligations. Specifically:

access records and account information are retained for the duration of your organisation’s commercial relationship with Rilla Network, and for such period thereafter as may be required by law or reasonably necessary for dispute resolution;
analytics data (including Google Analytics and Hotjar data) is retained in accordance with the applicable retention settings of those platforms, and is not retained by us beyond the periods required for Rilla Docs improvement purposes; and
communications and support records are retained for a reasonable period to support follow-up and to maintain a record of our interactions.

Where we no longer require your personal information for the purposes for which it was collected, we will ensure it is securely deleted or anonymised.

9. Security

We implement industry-appropriate technical and organisational security measures to protect personal information collected through Rilla Docs against unauthorised access, disclosure, loss, or misuse. Rilla Docs is gated and accessible only to authenticated users with a valid work email address belonging to an organisation with an executed NDA or commercial agreement.

Nonetheless, no internet-based transmission or storage system is completely secure. While we take reasonable steps to protect your personal information, we cannot guarantee absolute security, and you access Rilla Docs at your own risk in this respect.

You are responsible for maintaining the confidentiality of your access credentials and for any activity that occurs under your authenticated session. If you believe your access has been compromised, please notify us immediately at privacy@rilla.network.

10. Your Data Rights

Subject to the applicable law of your jurisdiction, you may have the following rights in relation to your personal information:

Access: to request a copy of the personal information we hold about you.
Rectification: to ask us to correct inaccurate or incomplete personal information.
Erasure: to request deletion of your personal information, subject to our legal and contractual obligations.
Objection: to object to the processing of your personal information in certain circumstances.
Restriction: to request that we restrict processing of your personal information in certain circumstances.
Portability: to request transfer of your personal information to another service provider, in a structured and machine-readable format, where technically feasible.
Withdrawal of consent: where processing is based on consent, to withdraw that consent at any time (without affecting the lawfulness of processing prior to withdrawal).
Complaints: to lodge a complaint with your applicable data protection supervisory authority (for example, the New Zealand Privacy Commissioner, the UK Information Commissioner’s Office, or the relevant EU data protection authority).

To exercise any of the above rights, please contact us using the details set out in section 12 of this Policy. We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before processing certain requests.

11. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, legal obligations, or Rilla Docs features. Any material changes will be notified to authorised Rilla Docs users via email or by a notice on Rilla Docs. The “Last Updated” date at the top of this Policy will be updated accordingly.

Your continued use of Rilla Docs following notification of any changes constitutes your acceptance of the updated Policy. If you do not agree with the updated Policy, you should discontinue use of Rilla Docs and notify us so that your access may be revoked.

12. Contact Us

If you have any questions, concerns, or requests relating to this Policy or our handling of your personal information, please contact us:

Privacy enquiries: privacy@rilla.network
Legal enquiries: legal@rilla.network
Registered office: Tayga Labs Limited, 2 Chancery Street, Auckland 1010, New Zealand

Rilla Network is a trading name of Tayga Labs Limited (company number 9063298), a company incorporated in New Zealand.