RichOutyHome

Privacy Policy

Last Updated: April 28, 2026 | Version 1.0

RichOuty (powered by RichOut) ("RichOuty", "we", "us") is committed to protecting your privacy. This Policy explains what data we collect from Event Organizers and Attendees, why, how we use it — including for AI platform development — and your rights under applicable law.

This Policy covers data for which RichOuty acts as Data Controller. Attendee Data processed on behalf of Organizers as Data Processor is governed by the Data Processing Addendum.

1. Who This Policy Covers

  • Event Organizers: entities that deploy RichOuty at events under an Order Form or collaboration agreement
  • Event Attendees: individuals who participate in RichOuty-enabled events
  • Website visitors: individuals who visit richouty.com or richout.ai
  • Sponsors and commercial partners

2. Data We Collect

A. From Organizers (Account and Event Data)

Organization name, contact details, billing information, event configuration data, uploaded attendee lists and registration data, support communications, and Order Form details.

B. From Attendees (Profile and Behavioral Data)

Name, professional email, job title, organization, industry, professional interests and goals, LinkedIn profile (where provided), preferred meeting types, event preferences, languages spoken, and any additional profile fields configured by the Organizer.

Behavioral and interaction data collected during events: matching acceptance and decline signals, meeting scheduling actions, check-in data, session attendance, platform engagement patterns, and connection outcome signals.

Attendee behavioral signals — particularly connection acceptance and decline patterns — are among the most valuable inputs to RichOuty's matching AI. These signals directly improve matching quality across the platform network through the Relationship Graph, operating on de-identified patterns.

C. Usage Data (Collected Automatically)

Device type, browser, IP address, session duration, feature interactions, matching flow behaviors, KPI dashboard interactions, API call patterns, and platform performance logs.

D. Connection Data

Records of AI-recommended connections, meeting scheduling activity, pre-event meeting fulfillment, no-show signals, and post-event follow-up indicators available through the platform.

E. Sponsor and Commercial Partner Data

Contact details, event participation data, sponsored matching preferences, and lead generation configuration data.

F. Third-Party Sourced Data

We may receive data from:

  • Event registration and ticketing platforms integrated with the Service
  • LinkedIn and professional network APIs where Attendees authorize connection
  • Marketing data providers for prospective Organizer outreach
  • Security intelligence providers for fraud prevention

3. How We Use Data

  • Providing and operating the AI matching and networking Service
  • Generating personalized networking recommendations for Attendees
  • Powering the Attendance Assurance Engine and KPI dashboard
  • Training, fine-tuning, and evaluating RichOuty's AI matching models using de-identified and aggregated platform data
  • Building and developing the Relationship Graph using anonymized connection signals
  • Generating Aggregated Event Intelligence and Derived Platform Data for platform development
  • Providing Organizers with post-event analytics and ROI reporting
  • Powering sponsor lead generation features where configured by Organizers
  • Security monitoring, fraud detection, and abuse prevention
  • Marketing and customer communications (opt-out available)
  • Complying with applicable UAE and DIFC data protection law

Legal bases under applicable law: performance of contract; legitimate interests (platform improvement, security, Relationship Graph development); consent (where indicated); compliance with legal obligations.

4. The Relationship Graph — Special Disclosure

RichOuty's most important AI asset is the Relationship Graph: a proprietary, continuously improving model of professional affinities and connection patterns built from anonymized, aggregated signals across all platform events.

Every event contributes de-identified signals to the Relationship Graph: which types of people connect, which recommendations are accepted, which meeting types generate follow-through. These signals are processed through RichOuty's de-identification pipeline before contributing to the Graph.

The Relationship Graph does not store your name, email, or any directly identifying information. It stores anonymized affinity vectors and connection pattern signals. Your contribution to the Relationship Graph cannot be reversed once de-identified — this is a consequence of the anonymization process, not a choice to retain your data.

The Relationship Graph is RichOuty Property. It may be developed, licensed, and commercialized by RichOuty. This is the core data asset that makes RichOuty's matching improve over time, and it is the commercial engine of the platform.

5. Data Sharing

Organizers receive Attendee Data for their own events

Organizers access Attendee profiles and matching recommendations for their specific event deployment. Organizers do not receive cross-event or platform-wide Attendee data.

Sponsors receive matched introductions only

Where Organizers configure sponsor matching features, Sponsors receive introductions to matched Attendees only to the extent Attendees have consented. Sponsors do not receive bulk Attendee lists.

Service providers and subprocessors

Listed at richouty.com/legal/subprocessors. Bound by data processing agreements no less protective than this Policy.

AI and platform development partners

We may share de-identified Aggregated Event Intelligence and Derived Platform Data with AI research partners, model providers, and technology partners for platform development. No identified Attendee Data is shared with such partners.

RichOut (parent platform)

RichOuty is powered by and shares infrastructure with RichOut. Data flows between RichOuty and RichOut are governed by a group data processing agreement and subject to the same protections as this Policy.

Legal and regulatory

Where required by UAE or applicable law. We assess validity and proportionality and notify where permitted.

Business transfers

In a merger, acquisition, or asset sale, Organizer data and RichOuty Property (including the Relationship Graph, Aggregated Event Intelligence, and Derived Platform Data) may transfer to the acquiring entity.

No sale of identified Personal Data

We do not sell identified Organizer or Attendee Personal Data to third parties.

6. International Data Transfers

RichOuty processes data primarily in the UAE. Organizers may select their preferred data processing region in the Order Form. Where data is transferred outside the UAE, we rely on: adequacy decisions; Standard Contractual Clauses; or explicit consent. Aggregated Event Intelligence, Derived Platform Data, and Relationship Graph Data — being de-identified — may be processed globally for platform development.

7. Data Retention

  • Organizer Account Data: Duration of partnership plus 7 years
  • Identified Attendee Profiles: Per-event period plus 12 months for cross-event matching (unless Attendee requests earlier deletion)
  • Event Data: Duration of Organizer contract plus 3 years
  • Usage Data: Indefinitely in aggregate form; 24 months in identifiable form
  • Relationship Graph Data and Aggregated Event Intelligence: Retained indefinitely as RichOuty Property
  • Connection Data: Retained in de-identified form indefinitely; identified version for 12 months post-event

8. Attendee Rights

Attendees have the right to: access their profile data; correct inaccuracies; request deletion of their identified profile (processed within statutory deadlines); opt out of future cross-event matching; data portability; object to direct marketing.

Attendees cannot reverse their de-identified contribution to the Relationship Graph or Aggregated Event Intelligence, as this data is no longer individually identifiable. This is consistent with applicable anonymization standards under UAE and DIFC data protection law.

To exercise rights: privacy@richouty.com.

9. Security

Encryption of Attendee Data in transit (TLS 1.3) and at rest (AES-256); strict data isolation between event deployments; role-based access controls; audit-ready infrastructure; regular security assessments. 72-hour breach notification to Organizers.

10. Children

The Service is not directed at individuals under the age of 18. Organizers must not include minors in event deployments without verifying applicable legal requirements.

11. Cookies

We use cookies for platform operation, analytics, and improvement. Full Cookie Policy at richouty.com/legal/cookies. You may manage preferences through your browser or our consent tool.

12. Updates

Material changes notified thirty (30) days in advance to Organizers by email and website posting. Non-material changes effective on posting. Continued use constitutes acceptance.

13. Contact