Privacy Policy

Operating Entity

The Rikon service (rikon.io) is owned and operated by MoonHire LLC. For legal or privacy inquiries: [email protected]

Overview

Rikon is a security intelligence service built on zero-knowledge principles. We verify your ownership of an email or domain before scanning, generate an intelligence report, and then delete your personal data.

What We Collect

• Email address or domain — only to perform the scan. Deleted immediately after scan completion.
• One-way hash of the scan target — retained only for deduplication.
• Notification email (optional) — used to deliver the report link, then deleted after 30 days.
• Payment record — we retain the transaction ID and amount for 7 years for financial compliance. No card data is stored by us — Stripe handles that.

Data Use for Service Improvement

We use anonymized, non-personal scan results — such as finding categories and counts, risk scores, tool performance, and scan duration — to measure and improve our detection quality. This data contains no email, domain, or other personally identifying information and cannot be linked back to you. We also collect anonymized product-usage events (such as page views and scan-flow steps) to understand and improve how the service is used; your email is never sent to our analytics tools — only a one-way hashed identifier is used.

Zero-Knowledge Design

Once a scan completes, the raw email or domain is wiped from our database. The encrypted report is stored on secure servers for 30 days, then automatically deleted. We cannot link a report back to your identity after the scan completes.

Report Access

• Reports are accessible only via the magic link emailed at scan completion.
• Lost links can be reissued (24-hour expiry) via rikon.io/recover.
• The recovery endpoint never confirms whether a report exists for a given email.

Data Retention

• Scan results: 30 days
• PDF reports: 30 days
• Verification codes: 10 minutes
• Security event logs: 30 days rolling
• Payment records: 7 years (no personal data)

Third-Party Services

• Stripe — payment processing
• Resend — email delivery
• Amazon S3 — encrypted report storage
• Neon — database hosting

Your Rights

Due to our zero-knowledge design, we do not retain personally identifiable information after scan completion. If you wish to delete your data before the retention period, contact us at [email protected].

Contact

For privacy inquiries, reach us at [email protected]