Local-first by defaultOptional AI only on requestHuman review always required
Privacy

Privacy & Data Protection Policy

What RCET collects, why it is used, who receives it and the choices available to you.

Version 2026-09-06 · Effective 6 September 2026

1. Scope and controller

RCET Cutting Edge Tools is responsible for the personal data described in this policy. This policy is informed by the Barbados Data Protection Act, 2019-29 and its principles of lawfulness, fairness, transparency, purpose limitation, minimisation, accuracy, storage limitation and security.

2. Data RCET collects

  • Account data: name, email address, organisation, role, account status, policy acceptance and password hash.
  • Subscription data: selected plan, provider references, subscription status, dates and transaction records. RCET does not receive complete card or bank credentials.
  • Security and technical data: IP address and standard server logs, browser and device information, login/session events, timestamps and error diagnostics.
  • Communications: information you send when requesting support, exercising rights or making a complaint.
  • Workspace content: the ordinary local workflow remains in your browser and is not written to the RCET database. An encrypted .rcetcase continuation file is created and controlled by you.
  • Optional AI content: only when you deliberately request AI enhancement, the selected draft is transmitted through the RCET server to the configured AI provider. RCET does not save that prompt or output to its application database.

3. Why data is used

Data is used to create and secure accounts, authenticate users, supply subscriptions and tools, process and reconcile payments, respond to requests, detect abuse, maintain service reliability, meet legal obligations and establish or defend legal claims. Where consent is relied upon, it may be withdrawn for future processing; other processing may rely on contract, legitimate interests or legal obligation as applicable.

4. Required and optional information

Required account and transaction information is necessary to provide paid access and security. Organisation details are optional. Optional AI processing is not required to use the local workflow.

5. Recipients and processors

Personal data may be processed by infrastructure and hosting providers, email providers, PayPal for payment and subscription services, professional advisers, and an AI provider only when optional AI enhancement is used. Data may also be disclosed where lawfully required, to protect rights or security, or in a properly managed business transfer.

6. International transfers

Some service providers may process information outside Barbados. RCET will assess providers and seek appropriate contractual, technical and organisational safeguards before approving processing that includes personal data. Current workspace use remains restricted to training and fictitious information.

7. Retention

Account, acceptance, subscription and transaction records are retained only for as long as needed for the service, security, accounting, dispute resolution and legal obligations. Technical logs are retained for a limited operational period. Support communications are retained while needed to resolve and document the request. Locally downloaded workspace files remain under the user’s control. RCET will document and periodically review detailed retention schedules before unrestricted production use.

8. Security

RCET uses access controls, password hashing, encrypted transport, CSRF protection, rate limiting, verified PayPal webhooks and local AES-256-GCM continuation files. No system can guarantee absolute security. Users must secure their device, email account, passwords, downloads and external drives.

9. Your rights

Subject to applicable law, you may request access, correction, restriction, objection, portability or erasure, and may complain about processing. Some records may be retained where required by law or necessary to establish or defend claims. Send requests from your registered email to contact@cuttingedgetools.xyz. Identity verification may be required.

10. Children

RCET is intended for adults and professional users and is not directed to persons under 18. Do not submit a child’s personal data during the controlled training stage.

11. Complaints

Please contact RCET first so the matter can be investigated. You may also contact the Barbados Data Protection Commission, which administers the national data-protection framework and investigates complaints.

12. Changes

Material changes will receive a new version date. Registered users may be required to review and accept an updated policy before opening a workspace or starting checkout.

Controlled-stage restriction: Training and fictitious information only. AI output may be inaccurate and must be independently reviewed by the responsible professional.