Effective October 12, 2026 · Applies to RIGOR Link and rigornow.com
RIGOR Link (the “Service”) is operated by Hackley Global Incorporated (“we”, “us”, “our”). This Privacy Policy explains how we handle information when organizations use the Service and when their customers text the numbers published through it.
This policy applies to rigornow.com and the RIGOR Link application. It does not govern how your organization handles the data of its own customers — that responsibility is yours, and we process that data only on your instructions.
Organization information: account details (name, email, password via our authentication provider), organization name, members and roles, phone numbers you connect, services and bookings you create, workflow configurations, and billing and credit activity.
SMS data: the conversations that travel through your connected numbers — inbound and outbound message content, sender and recipient numbers, delivery status, keyword matches and automated replies, and opt-out (STOP/START/HELP) records.
Contact information: the phone numbers and any names or details your organization stores about the people it messages, books or charges.
Payment records: payment request details (amount, currency, product, status, references), the identifiers we store to classify every transaction (application, organization, product, merchant, tenant, order, price and transaction references), and the subscription and entitlement records that determine access.
Usage and technical data: sign-in activity, audit events, and the operational logs needed to run and secure the platform.
Message content sent to and from numbers connected through RIGOR Link is processed to deliver the Service: storing threads in the shared inbox, running keyword automations, metering credit usage, detecting compliance keywords, and showing delivery results.
We do not sell SMS data or use your customers’ message content to advertise to them. We do not build advertising profiles from message content.
Each organization can see only the conversations that belong to its own connected numbers. Organizations cannot access another organization’s messages, contacts or records.
Compliance keywords (STOP, START, HELP) are processed automatically. STOP requests are honored immediately and recorded, and opted-out numbers are excluded from further messaging.
Each workspace is an organization. Organization data — members, numbers, contacts, conversations, bookings, payment requests and settings — is stored with tenant isolation enforced at the database level, so one organization’s members can only reach their own records.
The organization owner controls its members and roles. Members access organization data only through the roles the owner assigns to them.
We access organization data only to operate the Service (including support you request, security, fraud prevention, and compliance with law), not to compete with you or market to your customers.
Payments initiated through RIGOR Link are processed by third-party payment providers (such as Stripe) under their own privacy policies and terms. We do not receive or store full card numbers or bank credentials — those go directly to the payment provider.
We retain the records needed to run your commerce accurately and lawfully: what was purchased, for how much, in which organization, for which merchant of record, and the provider references (order, price, transaction, subscription and entitlement identifiers) that let us reconcile payments, issue refunds, honor entitlements and support disputes.
Every payment is classified with mandatory identifiers — application, organization, product, merchant, tenant (where applicable), order, price and transaction references — stored in our records and mirrored, in non-sensitive form, to the payment provider’s metadata. We do not store cardholder data in that metadata.
Hackley Global’s own subscription revenue and your organization’s customer payments are recorded as separate revenue classes and are never commingled.
We share data only with the providers needed to run the Service, each bound by their own terms: a messaging carrier and SMS provider (currently Telnyx) to deliver texts; a payment provider (currently Stripe) to process payments; a cloud hosting and database provider to run and store the platform; and an authentication provider to manage sign-in.
We may also disclose data when required by law, regulation, or valid legal process, and to protect the rights, property or safety of the Service, its users, or the public.
We do not sell personal data, and we do not share it for third-party advertising.
Credit balances, ledger entries and subscription status are organization records used to meter the Service and enforce plan limits. Billing contact details and invoices are retained as long as needed for tax, accounting and dispute purposes.
Organization data is retained while your organization’s account is active. If your organization stops using the Service, its data is retained for 30 days so you can request an export, after which it may be deleted.
Payment and billing records are retained for the period required by tax and accounting law. Compliance records — including opt-out history — are retained as required by carrier rules and messaging law.
We use encryption in transit and at rest, database-level access controls, signature-verified webhooks, restricted server-side credentials, and least-privilege access rules. Platform administration is limited to authorized personnel and is audited.
No system is perfectly secure. You are responsible for keeping your account credentials confidential and for the security of your own devices.
If you are an organization user, you can access and correct your account details in the app and request an export or deletion of your organization’s data by contacting us.
If you are a customer of an organization using RIGOR Link, that organization controls your data. To access, correct or delete your information, or to stop receiving their messages, contact that organization directly — replying STOP will stop its texts.
Depending on where you live, you may have additional rights under laws such as the CCPA or GDPR. We will honor applicable rights requests, either directly or by passing them to the organization that controls the data.
RIGOR Link is not directed to children under 13, and we do not knowingly collect their personal data. Organizations using the Service are responsible for complying with children’s privacy laws in their own programs.
We may update this Privacy Policy from time to time. Material changes will be announced in the app or by email before they take effect. Continued use after the effective date constitutes acceptance.
Questions about this Privacy Policy can be sent to Hackley Global Incorporated at legal@rigorhq.app.