Information with a defined purpose.

To operate the platform, RLSOK processes account identity (including Google sign-in identifiers), organization and professional roles, broker credential submissions, buyer requirements, site submissions, supporting documents, access decisions and activity records. We use this information to authenticate accounts, review submissions, protect confidential material, handle permission-based introductions and investigate security or misuse.

Public and private information

Approved summaries may be public. Exact site addresses, principals, private notes and evidence documents are stored encrypted and disclosed only to authorized users or platform administrators. Organization members share management rights over organization submissions. Do not include sensitive identifiers in public summaries.

Service providers, cookies and transfers

Hosting and security infrastructure providers process data necessary to operate the service. Google Identity Services supports sign-in. RLSOK uses essential session and security cookies; this release does not include advertising trackers. Automatic outbound email notifications and live payment collection are disabled in the current pilot. If billing is offered later, payment-provider details and terms will be disclosed before enabling it. Depending on service providers and administrator access, personal information may be processed across jurisdictions.

Retention, correction and deletion requests

Active account, submission and access records are retained while needed to operate the service, handle authorized requests and meet applicable obligations. Expired sessions and short-lived security tokens are subject to automatic cleanup; other records, including append-only activity history and encrypted backups, do not yet have a fully verified automatic deletion schedule. The operator must review and implement a defensible retention and backup-expiry plan before enabling new production registrations. Self-service account deletion is not currently available. Signed-in users may submit and track a request through the Account privacy page, or contact the operator using the email above. Access, correction, withdrawal and deletion requests are handled manually under applicable requirements. Backup copies may remain until their documented rotation period ends.

Security and choices

Private site evidence and sensitive fields have encryption and access controls, but no system can guarantee absolute security. Keep credentials private, use only authorized materials and share documents cautiously. You can withdraw submissions and revoke access grants through your workspace. Previously downloaded copies cannot be recalled. Optional search alerts can be stopped by removing the saved search. This notice will be updated if processing practices materially change.