1. Who We Are
This Privacy Policy describes how Royal Guardian Management LLC ("Royal Guardian", "we", "us", or "our") collects, uses, and shares personal information in connection with the Royal Guardian Management Portal (the "Service"). Royal Guardian Management LLC is the data controller responsible for personal information processed through the Service.
2. Information We Collect
- Account information: name, email address, password (stored hashed), organization, and role.
- Inspection content: property details, customer contact details you enter, checklist responses, notes, and photos you upload.
- Support communications: messages you send us and any attachments.
- Usage and device data: basic logs (IP address, browser/user agent, timestamps, pages accessed) used for security, abuse prevention, and reliability.
Payment card details are collected and processed directly by our Merchant of Record, Paddle.com — we do not see or store your full card number.
3. How We Use Information & Legal Basis
We process personal information for the following purposes and on the following legal bases:
- Provide the Service (authenticate you, host your inspection data, deliver reports to recipients you choose) — performance of a contract.
- Customer support — performance of a contract and our legitimate interest in helping users.
- Security, fraud prevention, and abuse detection — legitimate interest in protecting the Service and our users, and legal obligation where applicable.
- Service reliability and improvement — legitimate interest in operating and improving a stable platform.
- Billing and tax compliance (handled via Paddle as Merchant of Record) — performance of a contract and legal obligation.
- Legal compliance and responding to lawful requests — legal obligation.
- Marketing emails (if applicable) — consent, which you can withdraw at any time.
4. How We Share Information
We do not sell your personal information. We share data only with the following categories of recipients:
- Service providers / subprocessors needed to run the Service — cloud hosting, database, file storage, email delivery, analytics, and support tooling.
- Merchant of Record: Paddle.com Market Limited and its affiliates ("Paddle") act as our reseller and Merchant of Record for all purchases. Paddle processes payments, manages subscriptions, calculates and remits taxes, issues invoices, and handles refunds and chargebacks. Paddle's processing of your data is governed by Paddle's Privacy Notice.
- Report recipients you explicitly share inspection reports with (e.g. via a share link).
- Professional advisers (legal, accounting, insurance) where necessary.
- Authorities when required by law, subpoena, or to protect rights, property, or safety.
- Successors in interest in the event of a merger, acquisition, or sale of assets, subject to equivalent protections.
5. Data Storage & Security
Data is stored on secure cloud infrastructure with encryption in transit. Inspection photos are stored in a private bucket and are accessible only via short-lived signed URLs or to authorized members of your organization. We use Row-Level Security and role-based access controls to keep each organization's data isolated, and we apply appropriate technical and organizational measures to protect personal data.
6. Data Retention
We retain account and inspection data for as long as your account is active and as needed to provide the Service. After account closure or upon a verified deletion request, we remove or anonymize personal data from active systems within a reasonable period, except where retention is required for legal, tax, accounting, or security/fraud-prevention purposes.
7. Your Rights
Depending on where you live, you may have the right to access, correct, delete, or obtain a portable copy of your personal information; to object to or restrict certain processing; and to withdraw consent. To exercise any of these rights, contact your organization's administrator or email
info@royalguardianfl.com. You also have the right to lodge a complaint with your local data protection authority.
8. International Data Transfers
We are based in the United States and our service providers may be located in the United States or other jurisdictions. Where personal data is transferred from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions where available.
9. Cookies
We use cookies and similar technologies that are strictly necessary to operate the Service (for example, to keep you signed in). If we add analytics or marketing cookies in the future, we will provide a cookie banner so you can manage your preferences.
10. Children
The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by email.