RRize box

Privacy Policy

Effective October 21, 2026

You Live Once LLC ("we", "us") provides Rize box, a team password manager for shared logins, two-factor codes and inboxes. We are the data controller for the personal information described in this policy: we decide how and why it is processed. Logins and messages a company stores in Rize box belong to that company, and we process them on its behalf to provide the service. Questions may be directed to info@rizebrands.co.

Information we collect and why

  • Account data (name, email address, company name, sign-in and two-step sign-in details) — to create your account, sign you in and keep it secure.
  • Stored logins and inbox content (account names, usernames, passwords and two-factor keys stored encrypted, mailbox addresses, messages and drafts) — to provide the service your company asked for.
  • Activity data (access grants, share links, and records of actions such as revealing a password, sending mail or clearing an inbox, with the person and time) — for security, fraud prevention and your company's audit history.
  • Google connection data (connected email address, granted scopes and an encrypted refresh token) — to read and send mail for connected inboxes.
  • Technical data (IP address, browser and device details, error logs) — to operate, secure and improve the service.
  • Support messages — to answer your questions.

Legal basis

We process account, stored content, Google connection and support data to perform our contract with you and your company. We process activity and technical data based on our legitimate interests in keeping the service secure, preventing fraud and improving it. We process data to meet legal obligations where required, and with your consent where we ask for it, such as when you connect a Google account.

Who we share it with

  • Your team. Teammates your company's admins or managers give access to, and people you send a share link to.
  • Service providers that host, store and operate the service for us under confidentiality obligations.
  • Paddle.com, our Merchant of Record, which handles the sale of subscriptions, payments, billing, tax compliance and invoicing. Payment details are collected by Paddle directly; we do not store card numbers.
  • Professional advisers such as lawyers and accountants.
  • Authorities where required by law.

We do not sell personal information.

Use of Google data

With your authorization, Rize box requests basic identity scopes (openid, email, profile), Gmail read-only access, and Gmail send access. It retrieves messages, threads, and verification codes to display the shared inbox to authorized team members, and uses send access only when an authorized user sends a message. Rize box does not request permission to delete or modify mail in your Google account; clearing an inbox hides messages within Rize box only. Connecting a mailbox makes its content available to team members granted access to that shared inbox.

Sharing and Google API Limited Use

You Live Once LLC's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, provide it to data brokers, or use it to train AI or machine-learning models. Google user data is shared only with team members granted access to the relevant mailbox, with service providers that host and operate the service under confidentiality obligations, and where required by law. Human access is limited to the purposes described in this policy.

Security

Data is stored with our hosting and database provider. Passwords, two-factor seeds, and Google refresh tokens are encrypted before storage. Access is governed by sign-in authentication and per-resource permissions set by administrators. No system is fully secure; report suspected unauthorized access to info@rizebrands.co.

Retention and deletion

We keep the data described above for as long as your company's account is active and as needed to operate and secure the service. When it is no longer needed, or after a company's account ends, we delete or anonymize it within a reasonable period, except where we must keep records for legal, tax or security reasons. Administrators may clear or delete a mailbox, removing its locally stored messages, drafts, and access grants; Google retains the original mail in your Google account. Disconnecting a Google account removes its stored token and stops future access, but does not revoke the grant at Google — you may revoke it separately in your Google Account permissions.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent at any time. To make a request, email info@rizebrands.co; we respond within the time required by law. If information belongs to your company's space, we may refer your request to its administrators. You may also complain to your local data protection authority.

Cookies and local storage

We use only essential cookies and browser storage to keep you signed in, remember your settings such as light or dark mode, and protect the service. We do not use advertising cookies. Paddle may set cookies needed to complete checkout. You can clear these in your browser settings, but you will be signed out.

Changes

We may update this policy as the service changes. The effective date above identifies the current version. See also our Terms of Service and Refund Policy.