Privacy Policy — RyzLabs Inc.
Legal Document

Privacy Policy

Effective Date February 23, 2026
Replaces Version September 9, 2021
Version 2.0
Jurisdiction United States · California · European Union
Frameworks CCPA / CPRA · GDPR · EU AI Act
01

What This Privacy Policy Covers

This Privacy Policy covers how RyzLabs Inc. (RyzLabs, we, or us) treats personal data gathered when you access or use our services, website, and platform. "Personal Data" means any information that identifies or relates to a particular individual, including information referred to as "personally identifiable information" under applicable law.


This policy applies to all users globally, with additional rights for California residents (Section 8), Nevada residents (Section 9), and EU/EEA residents (Section 10).

02

Personal Data We Collect

Category Examples of Data Collected
Profile / Contact DataName, email, phone number, unique identifiers, passwords
Payment DataCard type, last 4 digits, billing address (processed by Stripe, Inc. and Payoneer, Inc.)
Commercial DataPurchase history, consumer profiles
Device / IP DataIP address, device ID, browser type, operating system
Web AnalyticsPage interactions, referral source, session statistics
Social Network DataEmail, username, IP address from third-party sign-in
Demographic DataAge, date of birth, zip code, gender
Professional / Employment DataResume, job title, job history
Geolocation DataIP-based location, GPS data
Sensory DataPhotos, videos, or recordings you voluntarily provide
Health DataMedical or health information you voluntarily provide
InferencesProfiles reflecting attributes or behavior derived from above data
Voluntarily Provided DataIdentifying information in emails, surveys, or support requests
03

How We Use Your Personal Data

  • Providing, customizing, and improving the Services — account management, transaction processing, fraud prevention, product development.
  • Marketing and selling the Services, including interest-based advertising.
  • Communicating with you — responding to inquiries, sending service and promotional communications.
  • Meeting legal obligations, including compliance with applicable law, court orders, and regulatory requirements.
  • Enforcing our Terms of Use and protecting the rights, property, or safety of RyzLabs, our users, and the public.
Note: We will not use your personal data for materially different purposes without providing prior notice.
04

How We Share Your Personal Data

Recipient Details
Service Providers Third parties that help us operate the Services: hosting, security, payment processors (Stripe, Inc.; Payoneer, Inc.), support, and fulfillment providers.
Advertising & Analytics Partners Ad networks, data analytics companies, and tracking providers that help us market our services and analyze usage.
Business Partners Businesses with whom we partner for joint offers or complementary services.
Legal Obligations We may disclose personal data as required by law, regulation, court order, or to protect the rights or safety of RyzLabs, our users, or others.
Business Transfers In connection with a merger, acquisition, or similar transaction, personal data may be transferred to a successor entity. We will provide reasonable notice before your data becomes subject to different practices.
05

Cookies and Tracking Technologies

We use cookies and similar technologies (pixel tags, web beacons, JavaScript) to operate and improve our Services.

Cookie Type Purpose & Opt-Out
Essential Cookies Required for core functionality (login, security). Cannot be disabled without impacting the Services.
Functional Cookies Remember your preferences and settings.
Analytics Cookies Measure how visitors use our site (e.g., Google Analytics). Opt out at tools.google.com/dlpage/gaoptout.
Advertising / Retargeting Cookies Used to serve interest-based ads. Opt out via aboutads.info/choices or networkadvertising.org/choices.
You can manage cookie preferences through your browser settings or our cookie preference center. For EU/EEA users, non-essential cookies are only set with explicit consent.
06

Data Security and Retention

We implement appropriate technical, organizational, and administrative safeguards to protect personal data. No data transmission over the internet is completely secure.


We retain personal data as long as your account is active or as necessary to provide our Services. Retention periods vary by data type and applicable legal requirements. See Section 10 for GDPR-specific retention periods.

07

Personal Data of Children

We do not knowingly collect personal data from children under 16 years of age. If you are under 16, please do not use our Services. If we learn we have collected such data, we will delete it promptly.

Report concerns to info@ryzlabs.com.
08

California Privacy Rights (CCPA / CPRA) Updated

This section applies to California residents under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). Updated — Expanded February 2026 to reflect CPRA rights.

Right Description
Right to Know / Access Request disclosure of the categories and specific pieces of personal information we have collected.
Right to Delete Request deletion of personal information we have collected, subject to exceptions (completing transactions, legal obligations, etc.).
Right to Correct Request correction of inaccurate personal information we maintain about you.
Right to Opt-Out of Sale / Sharing We do not currently sell or share personal information for cross-context behavioral advertising. If this changes, we will notify you and provide an opt-out mechanism.
Right to Limit Sensitive PI Direct us to limit our use of sensitive personal information (health data, precise geolocation, account credentials, etc.).
Right to Non-Discrimination We will not discriminate against you for exercising any of your CCPA/CPRA rights.
Right to Portability Request a copy of your personal information in a portable, machine-readable format.
How to Submit: Email info@ryzlabs.com with subject line "California Privacy Request." We will verify your identity and respond within 45 days (extendable by 45 additional days with notice). Authorized agents may submit requests with written permission.
09

Nevada Resident Rights

Nevada residents may opt out of the sale of certain personal information to third parties. We do not currently sell personal information under Nevada law.

To submit a request, email info@ryzlabs.com with subject "Nevada Do Not Sell Request" and include your name and account email.
10

EU / EEA Resident Rights (GDPR) New

This section applies to EU and EEA residents under Regulation (EU) 2016/679 (GDPR).

Legal Bases for Processing

Legal Basis Purposes
Contractual necessity (Art. 6(1)(b)) Account management, service delivery, billing, support.
Legitimate interests (Art. 6(1)(f)) Service improvement, security, fraud prevention, internal analytics, direct marketing to existing clients.
Consent (Art. 6(1)(a)) Non-essential cookies, marketing communications where required by law. Consent may be withdrawn at any time.
Legal obligation (Art. 6(1)(c)) Where processing is required by applicable EU or Member State law.

Your GDPR Rights

  • Right of Access (Art. 15) — Obtain a copy of your personal data and how it is processed.
  • Right to Rectification (Art. 16) — Request correction of inaccurate or incomplete personal data.
  • Right to Erasure (Art. 17) — Request deletion where data is no longer necessary, consent is withdrawn, or processing is unlawful.
  • Right to Restriction (Art. 18) — Request that we limit how we use your data in certain circumstances.
  • Right to Data Portability (Art. 20) — Receive your personal data in a structured, machine-readable format.
  • Right to Object (Art. 21) — Object to processing based on legitimate interests or direct marketing at any time.
  • Right to Withdraw Consent (Art. 7(3)) — Withdraw consent at any time without affecting the lawfulness of prior processing.
  • Right Against Automated Decision-Making (Art. 22) — Not be subject to solely automated decisions with significant legal effects without human review.

International Data Transfers

RyzLabs is based in the United States. When we transfer personal data from the EU/EEA to the US, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission (Art. 46(2)(c) GDPR). Copies are available upon request.

Retention Periods

Data Type Retention Period
Account DataDuration of account plus 2 years
Transaction Records7 years (legal/tax)
Marketing Consent3 years from last interaction
Candidate Interview Transcripts/Audio90 days
Candidate Score Records2 years
GDPR Requests: Email info@ryzlabs.com with subject "GDPR Request." We respond within 30 days (one-month extension possible with prior notice).

Right to Complain: You may lodge a complaint with your local supervisory authority. In Germany: Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI) — bfdi.bund.de.
11

EU AI Act Disclosure New

This section provides information about our AI systems under Regulation (EU) 2024/1689 (EU AI Act).

Arc AI Interview System

RyzLabs operates the Arc AI Interview System, classified as a high-risk AI system under EU AI Act Annex III Section 4(a) (AI used in recruitment and selection of natural persons). If you participate in an Arc-facilitated interview, you will receive a separate Candidate Information Notice before the interview disclosing:

  • That you are interacting with an AI system
  • What is evaluated and how
  • That all AI outputs are advisory and humans make all final employment decisions
  • Your right to request human review of any AI evaluation

Human Oversight

All decisions with significant effects on individuals — including recruitment decisions — are made by authorized human decision-makers. AI-generated scores are advisory only.

Contact info@ryzlabs.com with subject "AI System Inquiry" for questions about our AI systems or to request human review of an AI evaluation.
12

Changes to This Privacy Policy

We may update this Privacy Policy periodically. When we make material changes, we will post a notice on our website, send an email notification, or notify you by other means. Continued use of our Services after the effective date of any changes constitutes acceptance of the revised policy.

13

Contact Information

Website
Address
4500 Park Granada, Suite 202
Calabasas, CA 91302
GDPR Requests
info@ryzlabs.com
Subject: "GDPR Request"
CCPA Requests
info@ryzlabs.com
Subject: "California Privacy Request"
AI Inquiries
info@ryzlabs.com
Subject: "AI System Inquiry"
EU Authorized Representative
Jordan Metzner, Germany
info@ryzlabs.com
RyzLabs Cookie Consent