Clear about
your information.

01 / SCOPE

One platform, distinct workspace relationships.

This policy applies to the R4ACO website, application and mobile app operated by R4AI LLC. ACO providers run their own R4ACO workspaces and decide how they operate releases for their customers. Their published terms, privacy notice and support identity apply in addition to this platform policy. R4ACO is a product of R4AI LLC, not a separate legal entity.

02 / INFORMATION WE PROCESS

Information needed to run an ACO workspace.

• Account and workspace information. Discord account identifiers, display name, workspace memberships, roles, preferences and sign-in records.
• Customer and release information. Contact details, shipping and billing addresses, saved profiles, selected releases and SKUs, submission history, account assignments and support activity.
• Retailer checkout information. When a release requires it, the web intake may collect retailer account credentials and cardholder data supplied for that customer's authorized checkout. The native mobile app sends customers to the web intake and does not collect card fields itself.
• Order and PAS information. Retailer order identifiers, items, quantities, totals, shipment status, tracking events and provider fee status.
• Platform and device information. Security and audit events, installation identifiers, push-notification tokens, app version and operational diagnostics needed to run and protect the service.
• R4ACO billing information. Subscription and payment status from Stripe. Stripe processes the payment method used to pay R4AI LLC or a connected ACO provider; R4ACO receives transaction records and status needed to provide the service.

03 / HOW WE USE IT

To provide the workflow you asked us to run.

R4AI LLC uses information to:

• authenticate users and enforce workspace roles;
• create and operate releases, submissions, profiles and account assignments;
• prepare authorized bot exports and preserve their frozen history;
• track retailer orders, shipment updates and PAS obligations;
• deliver requested Discord, email and mobile notifications;
• process subscriptions and workspace payment activity;
• provide support, prevent misuse and investigate service or security issues; and
• meet applicable legal, accounting and contractual obligations.

R4ACO does not use customer information to build advertising profiles.

04 / HOW WE SHARE IT

Only with the people and systems needed for the service.

Information may be available to:

• the ACO provider and authorized staff for the workspace where it was submitted;
• infrastructure and service providers that support hosting, databases, encrypted key or secret custody, authentication, notifications and customer support;
• Stripe for R4ACO subscriptions, connected-provider payments and related records;
• Discord, Apple and Expo when you use Discord sign-in, workspace notifications or mobile push notifications; and
• authorities or other parties when required by law or reasonably necessary to protect users, the platform or the rights of R4AI LLC.

R4AI LLC does not sell personal information. We do not share it for cross-context behavioral advertising.

05 / SECURITY AND RETENTION

Protected records have additional boundaries.

R4ACO uses tenant-scoped access checks, signed-in sessions and audit history to limit protected operations. Retailer credentials use dedicated secret custody. Cardholder data submitted for a retailer checkout is encrypted with a dedicated AWS KMS key and is not displayed back in ordinary customer or staff pages. Authorized export actions can make the frozen data available to the ACO provider for the requested checkout.

We retain records while they are needed to provide the service, preserve accepted submissions and export history, resolve disputes, protect the platform and meet legal or accounting duties. The exact period depends on the record and the workspace relationship. Backups and immutable audit or transaction records may remain for a limited period after an account or workspace changes.

No service can guarantee absolute security. Do not send passwords, card numbers or security codes through support email, Discord, free-text notes or other fields that are not specifically labeled for that information.

06 / YOUR CHOICES

Control notifications and ask us to review your data.

You can turn mobile push notifications off in R4ACO or in your device settings. You can update reusable customer information from your workspace where that option is available. Contact us to request access, correction, deletion or a copy of your personal information. We may need to verify your identity and workspace relationship, and some records may be retained where required for security, transactions, legal duties or the rights of others.

A workspace owner controls membership in that workspace. Removing a workspace membership does not automatically erase historical submissions, retailer orders, payments or audit records. Contact both the workspace provider and R4AI LLC when a request concerns information held in a provider-operated workspace.