Privacy Policy

1. Who we are

Renzo (“Renzo”, “we”, “us”, or “our”) provides software for HR consultancies. This policy explains how we handle personal information collected through our website, our waitlist form, our founding-beta application form, and the Renzo platform itself when you take part in our founding beta.

For any privacy-related questions, contact us at hello@renzohr.com.

2. What we collect

The information we collect depends on how you interact with us.

When you join the Renzo waitlist

• Your name
• Your email address
• The name of your company
• The date you joined the waitlist

When you apply for the founding beta

In addition to the waitlist details above:

• Your consultancy’s name, website or LinkedIn URL, and size
• The number of Renzo users you anticipate needing
• The kinds of HR work you do and the tools you currently use
• What you find most frustrating about your day-to-day workflow
• The parts of Renzo you’re most interested in trying
• How much time you can give to testing and your preferred check-in format
• Any free-text you choose to add
• A hashed copy of the IP address you submitted from (used only for spam prevention - never stored in raw form, never linked to a login, never shared)

When you take part in the founding beta

Once selected, you use Renzo with your own consultancy and client data. You are the data controller for the personal data of your clients (and their employees, where relevant); Renzo acts as your data processor. We’ll put a written Data Processing Agreement in place before you process any live client data through the platform. See section 6 below for the beta-specific details.

We do not collect special-category data through any of our public forms (waitlist, founding-beta application, demo access).

3. How we use your information

We use the information you provide to:

• Notify you when Renzo launches
• Share occasional product updates if you have opted in
• Understand demand and improve the product roadmap
• Review founding-beta applications, decide who to invite to the beta, and stay in touch with applicants either way
• Run the founding beta itself - provide platform access, respond to feedback, share onboarding materials, and arrange the weekly check-in (call or short form)

We will not sell, rent, or share your personal information with third parties for marketing purposes.

4. Lawful basis

Under UK GDPR, our lawful basis for processing your information is your consent, given when you tick the agreement box on the waitlist form. You can withdraw your consent at any time (see “Your rights” below).

5. Where we store your data

Renzo’s primary database is hosted on Supabasein the EU-Central region (Frankfurt, Germany), with row-level security so each consultancy’s data is isolated from every other. The application itself runs on Vercel, with serverless functions pinned to London (lhr1) so traffic stays in the UK / EU. OAuth tokens (Microsoft, Google, Dropbox) are encrypted at rest with AES-256-GCM before they touch the database.

We rely on the following sub-processors to deliver the service. Each processes a defined slice of data on our behalf under a written data-processing agreement. Some are only used when a consultancy explicitly opts in (e.g. by connecting an integration); those are marked optional.

Where data is transferred outside the UK / EEA, the transfer is covered by the UK International Data Transfer Agreement or Standard Contractual Clauses (SCCs) with our sub-processor. The current sub-processor list is maintained here and customers are notified of any material change.

6. Founding beta testing

The Renzo founding beta runs for six weeks from Wednesday 8 July 2026 with a small group of HR consultancies who have applied through /founders and been invited.

Roles

During the beta, you are the data controller for any personal data of your clients (and their employees) that you choose to enter into Renzo. Renzo is the data processor - we hold that data on your behalf, only for the purposes you direct, and only for as long as the beta continues or you ask us to delete it.

Before you process any live client data through Renzo, we’ll put a written Data Processing Agreementin place that mirrors the UK GDPR Art. 28 requirements. You can start the beta on test data only if you’d prefer.

What we collect during the beta

• Standard product-usage signals (which features you open, when you log in) so we know what’s landing and what isn’t
• Any feedback you send us via the weekly check-in (call or short form), in support emails, or inside the product
• Authenticated session logs, retained for 30 days, used only for security and incident response

We do not screen-record, key-log, or read your client casework content for analytics purposes. AI features (Anthropic) remain strictly opt-in per workspace during the beta.

Your right to withdraw

You can leave the beta at any time, for any reason, with no notice required. We’ll export your data in a portable format within 14 days of you asking, then delete it from our active systems within a further 30 days. Encrypted backups roll off on their normal 90-day cycle.

7. How long we keep it

Waitlist details: until either (a) you unsubscribe, (b) you ask us to delete them, or (c) the Renzo waitlist programme ends - whichever comes first.

Founding-beta application details: for the duration of the application window (currently 22 June 2026), plus up to 12 months afterwards so we can re-contact unsuccessful applicants when the next intake opens. You can ask us to delete your application at any time.

Live beta data inside Renzo: retained for the duration of the beta and exported / deleted within 30 days of withdrawal or the beta ending - see section 6.

Authentication logs: 30 days, used only for security and incident response.

8. Cookies & analytics

Our marketing site uses two types of cookies:

• Essential cookies - needed for the site to work and to remember your cookie preference. These are always on.
• Analytics cookies (optional) - if you accept, we load Google Analytics 4 to understand how visitors find and use the site (pages viewed, session duration, referring source, approximate location). We have enabled IP anonymisation, so your full IP address is not stored.

When you first visit, we ask you to accept or decline analytics cookies. We do not load Google Analytics until you accept. You can change your mind at any time: Manage cookie preferences.

We do not use advertising, retargeting or social-media tracking cookies on the marketing site.

9. Your rights

Under UK GDPR you have the right to:

• Access the personal information we hold about you
• Ask us to correct inaccurate information
• Ask us to delete your information
• Withdraw your consent and unsubscribe at any time
• Lodge a complaint with the UK Information Commissioner’s Office (ico.org.uk)

To exercise any of these rights, email us at hello@renzohr.com. We will respond within 30 days.

10. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top of the page reflects the most recent version. Material changes will be communicated by email where possible.

11. Contact us

For questions about this policy or how we handle your data, please contact:

Renzo
Email: hello@renzohr.com