Privacy policy

Account data

• Email address
• Password (stored in hashed form, never in plain text)
• Phone number, to help you get started and to reach you if an email does not get through

Accounting documents you entrust to us

• Invoices, receipts and supporting documents you upload
• Data extracted by automatic reading : amount, date, supplier, category

Usage and billing data

• Connection logs and actions performed on the platform
• Subscription status and payment history, via ABSA Mauritius — we never store your bank details

Processing is based on the performance of the contract (our Terms of Use) you accept when creating your account, as well as on our legitimate interests in platform security and fraud prevention.

• Provide and improve the Riserv service
• Automatically extract your accounting and VAT data using artificial intelligence
• Manage your account and subscription
• Ensure platform security and fraud prevention
• Transactional communication (sign-up confirmation, security alerts)

We never sell your data and do not share it with advertisers. We use the following technical sub-processors :

• OVH Cloud (France, Germany) — hosting of uploaded documents
• Neon (managed PostgreSQL database, EU) — storage of account and accounting entry data
• Mistral AI — automatic reading of your documents (transmitted encrypted over TLS, used only for extraction and not retained by Mistral AI)
• ABSA Mauritius — subscription payment processing

Transfers outside Mauritius (notably to the EU) are covered by appropriate contractual safeguards.

• While your account is active : unlimited duration
• On deletion of your account : erasure within 30 days
• Encrypted backups : an additional 90 days, then purged
• Mauritian legal obligations (accounting retention) : 5 years for documents marked as exported to your accounting tools
• Connection logs : 12 months

• Encryption in transit (HTTPS / TLS 1.2+) across the entire platform
• Token-based authentication, without cookies : the session token is kept locally in your browser (or securely on-device for the native application), never in a third-party cookie
• Passwordless sign-in (passkey) available as an option, alongside your password
• Server access strictly limited to the technical team, under a confidentiality obligation

Riserv does not use any third-party advertising or analytics tracking cookies. Authentication does not rely on cookies (see Section 6).

In accordance with the Mauritian Data Protection Act 2017 and the GDPR for European users, you may at any time :

• Access your data
• Rectify it
• Export it (portability)
• Request its deletion (right to erasure)
• Object to a processing operation

To exercise these rights, write to : contact@riserv.mu. We respond within 30 days.

You may also lodge a complaint with the Mauritian Data Protection Office : dataprotection.govmu.org

Riserv is reserved for users of legal age (18 or older). We do not knowingly collect data from minors.

Any substantial change to this policy will be notified to you by email 30 days before it takes effect. The date of the last update is shown at the top of this page.

Dipicorp Ltd (publisher of Riserv)
Email : contact@riserv.mu
Postal address : Avenue Badamier, Bellevue Phare, Albion, Mauritius

Data Protection Officer : contact@riserv.mu