Privacy Notice

Last updated: October 2026

Risk on Radar is a product currently in development. We are in the process of registering a legal entity in the Netherlands. Until that registration is complete, the Risk on Radar team is responsible for your data and provides this notice. Any request relating to your data can be sent to contact@riskonradar.com.

What we collect

Forms. When you submit the early access form or the full report request on our case study page, we collect your full name, work email, company, role or title, and whatever else you choose to tell us in the form.
Shared reports. When you open a report we have shared with you (for example our full wind turbine FMEA on app.riskonradar.com), we record when you opened it, your IP address and the approximate location derived from it (city, region and country), your browser type, the email address if you choose to enter one, and which parts of the report you view or download. The location is looked up on our own server from a local IP database, so your IP address is not sent to any other company for this. The password page tells you this before you open the report.
Accounts. If you have an account on app.riskonradar.com, we hold the name and email address you sign in with.
Technical data. Our hosting providers process your IP address and similar technical data to deliver the website. This website itself does not use analytics or tracking.

Why we use it, and on what legal basis

To respond to your form submission and follow up with you: to take steps at your request before a possible agreement (Article 6(1)(b) GDPR) and our legitimate interest in following up on your enquiry (Article 6(1)(f)).
To know who has accessed reports we shared and how they are used, so we can protect confidential material and improve our reports: our legitimate interest (Article 6(1)(f)).
To provide your account on app.riskonradar.com: to perform our agreement with you (Article 6(1)(b)).
To deliver and secure the website: our legitimate interest (Article 6(1)(f)).

How long we keep it

Form submissions: up to 24 months after our last contact with you, unless you ask us to delete them sooner. Shared report records: 12 months, then deleted automatically. Account data: for as long as your account exists.

Who has access

Only the Risk on Radar team has access to your information. We do not sell your data, and we do not share it with third parties for marketing purposes.

We use these service providers. They process data only to provide their service to us:

Formspree (United States) receives and stores the forms you submit and forwards them to us by email.
Cloudflare hosts and delivers this website and processes technical data such as your IP address to do so.
Supabase stores the shared report records and account data, in the EU.
Clerk (United States) handles sign-in for app.riskonradar.com.
Google Fonts serves the fonts this site uses; your browser requests them from Google's servers, which receive your IP address.

Transfers outside the EU

Some of these providers are based in the United States or operate worldwide. Where your data leaves the European Economic Area, the transfer relies on the EU-US Data Privacy Framework where the provider is certified under it, or on the European Commission's standard contractual clauses.

Your rights

You have the right to access the data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. To use any of these rights, email contact@riskonradar.com.

You also have the right to complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Changes to this notice

This is a minimal, early-stage notice. We'll replace it with a complete privacy policy once our legal entity is registered and the product is further along.