Privacy policy

Who

Fractal Risk is an application for identifying and analysing business risks. The data controller is Fractal Risk (contact: contacto@fractalrisk.co).

What we collect

Account: your email address and a password (stored as a bcrypt hash, never in clear text). Optionally, your organisation's name, industry, company size, the maximum financial impact you consider relevant, and your language and theme preferences.

Content: what you type in the analysis chat and in the radar (descriptions of processes, projects, companies, countries). It is the raw material of the analysis and stays in your history until you delete it.

Security: sign-in records (date, IP address, device type) to detect unauthorised access. If you enable two-step verification the TOTP secret is stored encrypted; if you create a passkey, only its public key.

Voice dictation: if you use the microphone, speech is transcribed on your own phone by the system's speech recognition (Android or iOS). Audio is never sent to our servers nor stored; only the text arrives, as if you had typed it.

Why

To provide the service: generating risk analyses, the radar, exports, and keeping your history. To protect your account (verification email, password recovery, email-change notices). We do not advertise or sell data.

With whom

To generate analyses we send the content of your queries to language-model (DeepSeek) and web-search (Tavily) providers. They receive the query text, not your email or identity. Servers are hosted on Render (United States) and emails are sent with Resend. Each provider processes data under its own policy.

How long

For as long as you have the account. You can delete individual analyses and radars from the history, and the whole account from Settings → Delete account: your user, analyses, radars, sessions and credentials are removed immediately. Security records are kept anonymised (no email or identifier) for 12 months.

Your rights

Access, rectification, portability (export any analysis to Excel or PDF) and erasure. For any request, write to contacto@fractalrisk.co. Colombian Law 1581 of 2012 applies if you are in Colombia; the GDPR if you are in the European Union.

Changes

If this policy changes, the update date (above) changes and, if the change matters, we will email you. Last updated: 2026-09-14.