Privacy Policy
Effective Date: July 19, 2026
This Privacy Policy explains how Ralia collects, uses, processes, and protects personal data belonging to users across our platform architecture, including our website (ralia.co) and our mobile applications. Ralia is fully committed to compliance under global data protective frameworks, including the General Data Protection Regulation (GDPR), the United Kingdom General Data Protection Regulation (UK GDPR), and the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).
1. Platform & Entity Identification
Ralia operates as a modern decentralized word-of-mouth engagement ecosystem connecting promoters with campaign creators. Our technical architecture establishes two distinct governance capacities over personal data:
- Data Controller Status: Ralia acts as the Data Controller for all core registration parameters, platform profiles, technical logs, device indicators, and account administrative settings.
- Data Processor Status: Ralia operates as a Data Processor when executing specific custom audience matches, target deployment configurations, and verification validations managed on behalf of institutional Campaign Creators.
For any inquiries regarding data protection, automated profile parameters, or privacy rights, contact our Data Operations Desk directly at support@ralia.co or hello@ralia.co.
2. Comprehensive Data Collection Matrix
Ralia records and processes explicit granular details to maintain accountability and trace campaign distribution vectors. The following matrix indexes all category data collection protocols:
| Data Category | Granular Data Points Collected |
|---|---|
| Account Data | Legal first and last name, verified primary email address, telephone contact indicators, account type configurations (Promoter vs. Campaign Creator/Organization/Ministry). |
| Verification & Trust Data | Vendor qualification validations, corporate or ecclesiastical registration documents, regulatory incorporation numbers, and government-issued identity verification markers. |
| Financial & Payout Data | Campaign wallet funding logs, external funding source records, clearing numbers, bank routing and account numbers designated for automated weekly Friday promoter payouts, and complete historical transaction ledgers. |
| Core Engagement Data | Campaign tracking matrices, system-generated cryptographic sharing links, smart discovery selections, user tagging data, and target completion uploads (including uploaded screenshots and engagement verification metrics). |
| In-App Communication Logs | Timestamps, systemic delivery indicators, application metadata, routing information, and network activity log parameters stemming from text-based messaging and call connectivity within the platform architecture. |
| Device & Technical Data | Precise and coarse real-time geolocation indicators (essential for localized physical community networks and geo-targeted event promotions), Internet Protocol (IP) address allocations, unique device identification values (UUID/IMEI), mobile operational environment variants, and localized analytical engine cookie profiles. |
3. Legal Bases for Processing (GDPR Compliance)
Under European and United Kingdom regulatory standards, Ralia operates under defined legal bases depending on the context of processing activity:
- Performance of a Contract: The processing of account indicators, transactional history, and wallet data is necessary to execute platform service terms, coordinate system verifications, and fulfill automated Friday payout allocations.
- Consent: Explicit, affirmative consent forms the regulatory foundation for accessing precise location trackers to deliver geo-fenced promotions or matching accounts through targeted automated smart discovery variables.
- Legal Obligation: Ralia processes personal metadata, verification markers, and banking records under mandatory statutory protocols concerning Anti-Money Laundering (AML) standards, Know Your Customer (KYC) directives, and global corporate tax accounting practices.
- Legitimate Interests: Ralia exercises data monitoring for security threat detection, network load balancing, fraud prevention matrices (including verifying unique user authenticity to block multi-profile creation anomalies), and cross-system product improvements.
4. Data Sharing & Third-Party Disclosures
Ralia maintains a strict non-commercialization stance regarding user information. We do not sell, barter, lease, or monetize user personal data to third-party data brokers or marketing houses. Disclosures are restricted exclusively to operational fulfillment vectors:
Operational Third-Party Sub-Processors
Data transmission occurs with sandboxed service nodes critical to service stability: cloud computing architecture networks, payment processing gateways (coordinating funding workflows and Friday payouts), enterprise database systems, institutional identity verification providers, and diagnostic tracking telemetry engines.
Campaign Creator Visibility Transparency
When Promoters engage with specific initiatives, the respective institutional Campaign Creator/Organization receives access to aggregated metrics, system campaign links, and direct promotional verification proofs required to validate fulfillment performance prior to payout clearing.
5. Global User Rights
Ralia implements comprehensive global access controls allowing all participants to exercise absolute rights over their stored digital footprint:
- The Right to Access & Portability: Users may request complete, machine-readable extractions of all historical data logs linked to their platform identity.
- The Right to Rectification: Complete administrative access is available to alter or update inaccurate profile settings or institutional verification credentials instantly.
- The Right to Erasure ("Delete My Account"): Users maintain the right to permanently purge their profiles. Upon submission of an erasure directive, Ralia anonymizes or completely deletes all account structures, except for transactional history parameters legally required for corporate accounting audits.
- The Right to Restriction & Profiling Opt-Out: Users retain the absolute right to limit processing permissions, opt-out of automated smart discovery profiling matrices, or disable localized geo-tracking at any point through the mobile application configuration center.
To exercise any of these compliance protocols, transmit a structured request directly to the compliance desk via support@ralia.co.
6. Data Retention & International Transfers
Ralia maintains structural data minimisation standards. Personal records are retained exclusively throughout the operational lifespan of the active platform account configuration. Following an account deletion event, operational logs are deleted within thirty (30) days, except for financial transaction records, ledger proofs, and verification histories which are preserved for a period of seven (7) years to fulfill regulatory tax audit tracking mandates.
Because Ralia infrastructure relies on decentralized cloud arrays, personal data may be cross-routed internationally. To maintain maximum safety compliance, all international routing protocols out of the European Economic Area (EEA) or the United Kingdom are governed explicitly by Standard Contractual Clauses (SCCs) to ensure equivalent, unbreakable cross-border protective coverage.