Last updated: November 28, 2025
At Still, we respect your privacy and are committed to protecting your personal data.
Rienzi Technologies, United Kingdom (Data Controller). Contact: legal@rienzitech.com. We do not have a dedicated Data Protection Officer but handle queries via the above.
We collect information you provide directly to us, such as when you:
We process data under: Contract (Art. 6(1)(b)) for demo bookings/service delivery; Legitimate Interests (Art. 6(1)(f)) for support/responses (balanced against your rights); Consent (Art. 6(1)(a)) for marketing. You can withdraw consent anytime.
Purposes are limited (Art. 5(1)(b)). We minimize data collection to essentials.
Your distillery data is encrypted at rest and in transit (AES-256 + TLS 1.3).
We are SOC 2 Type II compliant and undergo annual third-party security audits.
Backups are encrypted and retained for 90 days.
Data is retained for: Inquiries (2 years post-response); Accounts (subscription term + 2 years). Deletion follows requests (Art. 17).
Data is stored in the US (AWS). For EU users, we use Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework for adequacy (Art. 46/45).
We do not sell your data. We only share information with:
You have rights to: Access, rectification, erasure ("right to be forgotten"), restriction, portability, objection, and human review of automated decisions. Exercise via privacy@still.software (response within 1 month). No fee unless excessive.
For EU residents: Complain to your supervisory authority (e.g., via EDPB).
We do not knowingly collect data from under 16s (Art. 8). If discovered, we delete it.
We'll notify you via email/site notice for material changes (Art. 13(1)(d)). Last updated: November 28, 2025.