Privacy notice

1. Overview

This privacy policy explains how Spektal GmbH ("we", "us") processes personal data when you visit rytiv.com or docs.rytiv.com. This website and our services are directed at businesses and freelancers within the meaning of § 14 BGB. The rytiv console is a separate, signed-in service with its own privacy page; this policy covers the public website and the public documentation.

2. Responsible party

Spektal GmbH
Stau 123
26122 Oldenburg, Germany
Email: privacy@rytiv.com

3. Hosting and access logs

This website is served from our own infrastructure in the European Union (Amsterdam, Netherlands). When you access it, technical access data is processed automatically (IP address, timestamp, requested URL, browser type) to deliver the site and to ensure its security. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating and securing the website). Access logs are kept short-term and are not used to build profiles.

The pricing page asks api.rytiv.com, our own address, whether a price change has been announced, so your browser sends that server the same technical data. No other address is contacted by any page of this website.

4. Cookies and tracking

This website sets no cookies, stores nothing on your device and uses no analytics, tracking or advertising tools. Fonts are served from our own servers, not from third parties. There is nothing to consent to, which is why there is no cookie banner. Should this ever change, the change will appear here first, and anything requiring consent will only run after your explicit consent pursuant to Art. 6(1)(a) GDPR.

5. Contact via email

When you contact us by email, we process the personal data you provide (name, email address, content of your message) to handle your inquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). Your data will not be shared with third parties without your consent, apart from the recipients below.

6. Who can see data

This website runs on our servers at Scaleway SAS in the EU. Its name is resolved by Cloudflare, Inc. A message to one of our @rytiv.com addresses goes through Cloudflare Email Routing and arrives in a mailbox at Google Workspace, so it leaves the EU. That covers our business mail, including support requests and abuse reports with the personal data of those reporting and those reported; it does not cover customer workloads, databases or files. The complete list for the rytiv service, with the role of each, is below and in the data processing agreement. Where a company is outside the EU, the transfer rests on the EU standard contractual clauses or an adequacy decision.

• Scaleway SAS, 8 rue de la Ville l'Evêque, 75008 Paris, France. Servers, network and data centre; the managed Postgres databases of the platform and the console; object storage (artefacts, customer objects, backups); load balancer.
• Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Authoritative DNS for our domains, including the names of applications and their custom domains. Cloudflare only answers where a name lives; it is not in the data path and sees no content.
• Quad9 Foundation, c/o SWITCH, Werdstrasse 2, 8004 Zürich, Switzerland. Recursive name resolution for outbound requests of the machines. Quad9 sees the names looked up and our servers as the asker, not the end users.
• Anthropic Ireland, Limited, Dublin, Ireland (parent: Anthropic, PBC, USA). AI-assisted operating tools of our operators during incidents and maintenance. It concerns operating data an operator handles in doing so: log lines, error messages, identifiers of resources. The tool's vendor itself has no access to customer databases.
• Stripe Payments Europe, Limited, One Wilton Park, Wilton Place, Dublin 2, D02 FX04, Ireland (parent: Stripe, Inc., USA). Payment processing of credit top-ups, invoices and receipts. Stripe sees billing details, amount and payment method, no workloads and no content. For parts of this Stripe acts on its own responsibility.
• GitHub, Inc., 88 Colin P Kelly Jr St, San Francisco, CA 94107, USA. Only when the customer chooses it: signing in with GitHub and deploying from a GitHub repository. GitHub sees these sign-ins and reads under the customer's own contract with GitHub.
• Internet Security Research Group (Let's Encrypt), 548 Market St, PMB 77519, San Francisco, CA 94104-5401, USA. TLS certificates for applications and custom domains. The domain names then appear in public certificate transparency logs, the names only, no content.
• Google Cloud EMEA Limited (Google Workspace), 70 Sir John Rogerson's Quay, Dublin 2, Ireland (parent: Google LLC, USA). The mailbox for Rytiv's business mail. Mail to our @rytiv.com addresses, such as abuse@, legal@, privacy@ and support@, goes through Cloudflare Email Routing and arrives there. This includes support requests and abuse reports with personal data of those reporting and those reported, but not customer workloads, databases or files on the platform.
• Immutable VOF (Oh Dear), Hemelshoek 277, 2590 Berlaar, Belgium. Public status page status.rytiv.com: checks from outside whether our services respond, processes IP address and browser data when the page is visited, and holds the email addresses of people who subscribe to status updates. Sees no workloads and no customer content.

7. Your rights

Under the GDPR, you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21), as well as the right to lodge a complaint with a supervisory authority (Art. 77). To exercise your rights, contact us at privacy@rytiv.com.

8. Data retention

We retain personal data only as long as necessary for the purposes for which it was collected, or as required by law (for example commercial and tax retention obligations).

9. Changes to this policy

We update this policy when legal requirements, our services or our data processing change. The current version is always available at rytiv.com/privacy.

Last updated: November 9, 2026