Who we are
Rimas360 is software that hotel and club operators use to run their properties: staffing, operations, finance and hiring. This policy explains what we collect when you use it, why, and what you can do about it.
Most people use Rimas360 because the company they work for, or applied to, uses it. That company decides what goes into its account and who can see it; we process that information on its behalf and on its instructions.
What we collect
Account details: your name, email address, role and the properties you are assigned to, given to us by your company when it invites you.
Sign-in details: when you sign in with Google or Microsoft, we receive your name, email address and profile picture from that account. We use them only to confirm who you are and to show your name in the app.
What your company puts in: schedules, tasks, financial figures, staff records and, for hiring, the applications people submit.
Usage and device information: pages visited, actions taken and error reports, which we use to keep the service working and secure.
Google and Microsoft accounts
Signing in asks Google or Microsoft only who you are. It gives us no access to your email, files or calendar.
A company administrator can connect the company’s Google or Microsoft 365 mailbox so that offer letters, interview invitations and alerts come from the company’s own address. That connection grants permission to send email only. Rimas360 sends the messages the company asks it to send and never reads, searches or deletes anyone’s mail. The key that permits sending is stored encrypted, and an administrator can disconnect it at any time in Settings → Email, or from the Google or Microsoft account’s own security settings.
If your company connects Google Sheets, Rimas360 reads only the sheets it is pointed at, to import them.
Rimas360’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We do not use information from Google or Microsoft accounts for advertising, do not sell it, do not let people read it except where you ask us to for support or the law requires it, and do not use it to train AI models.
How we use it
To provide the service your company signed up for, to send the emails it asks us to send, to keep accounts secure, and to answer support requests.
We do not sell personal information, we do not use it for advertising, and we do not train models on it. Questions asked of the in-app assistant are processed by our model provider under a zero-retention agreement.
How long we keep it
For as long as your company’s account is active, then 30 days after it cancels so it can export its data. On a written deletion request we delete it within 30 days and confirm in writing. Encrypted backups roll off after 35 days.
Security
Data is stored in US datacentres, encrypted at rest and in transit. Each company is a separate tenant and every query is scoped to it. Keys that let Rimas360 act for a company, such as a connected mailbox, are encrypted again before they are stored. Our security & trust page has the detail.
Your choices
To see, correct or delete information about you, ask your company’s administrator, who can do most of it in the app, or write to us at the address below and we will work with your company to respond.
If you applied for a job through a company’s careers page, that company holds your application; contact it, or us, to have it removed.
Rimas360 is not meant for children under 16, and we do not knowingly collect their information.
Changes and contact
If we change this policy in a way that matters, we will tell company administrators before it takes effect.
Questions or requests: privacy@rimas360.com.