Privacy notice

When you create a RiskKit account we collect your name, company name and email, and a password (stored encrypted — never in plain text). We use these to set up and run your company's account and provide the service. RiskKit is a PSA Studio product, and PSA Studio is the data controller. We never sell your data.

Where it's stored: your account and the risk assessments you create are held securely by Supabase, our database and authentication provider. Account emails are sent on our behalf.

Payments: the trial needs no card. If you take out a paid plan later, card payments are handled by a third-party payment provider — we never see or store your full card details.

How long we keep it: for as long as you have an account. Close it any time and we'll delete your data, subject to any legal record-keeping.

Your rights: you can ask to see, correct or delete your data, and complain to the UK Information Commissioner's Office (ICO). Contact privacy@psastudio.org.

Cookie notice

RiskKit uses only the essential storage needed to keep you signed in (via Supabase authentication). There are no advertising or tracking cookies — we don't profile you or follow you around the web.

You can clear or block cookies any time in your browser settings, though you may then not be able to stay signed in.

Terms & disclaimer

By creating an account you agree to these terms.

What RiskKit is: a tool to help you produce risk assessments. It supports, but does not replace, a competent person's judgement. You remain responsible for the suitability and sufficiency of your assessments and for meeting your legal duties.

The service: provided on a free trial and then a paid subscription. We may update the service over time.

Liability: so far as the law allows, PSA Studio is not liable for any loss arising from use of the service. This does not affect your statutory rights.

Questions? Contact privacy@psastudio.org.