Security

Righto was private by design from the start. Your books live in an encrypted file on your own Mac. There is no Righto account and no server that holds a copy, so there is nothing of yours for us to lose, sell or hand over. This page explains how that works.

Your data stays on your Mac

• Each business is one file with the extension .righto. It holds the books, your statement files, your attachments and the full history.
• There is no account to sign up for and no cloud copy. Righto does not connect to your bank.
• You choose where your backup copies go. Righto does not make them for you.
• Righto works fully offline. On its own, it goes online only to check for updates and to send basic usage information and crash reports. These tell us which versions are in use and what goes wrong, so we can keep Righto working well without knowing who you are. They never include your books. You can turn off usage information and crash reports in About Righto.

Password and recovery key

• The file is encrypted. Your password unlocks it, and it has at least 8 characters.
• Every business also gets a recovery key that unlocks it. Righto shows the key once and keeps no copy. Nobody, including us, can reset it.
• If you lose both the password and the recovery key, nobody can open the file. Keep the key in a safe place, such as a password manager.
• You can let your Mac remember the password in your Keychain. This is optional and applies to that Mac only.

Locking

Righto locks a business when you press ⌘L, lock the screen, put the Mac to sleep, quit Righto, or leave the Mac idle for 15 minutes. A locked business needs the password again, and agents cannot use it.

Agents

• Righto has no AI inside. Agents are optional, and you can do all the work yourself.
• You give each agent one of three levels for one business: Read only, Propose changes, or Full access. Changes from Propose changes wait for your approval.
• Agents use the same rules and checks as the app, and every change shows in Activity with the agent’s name. You can revoke a connection at any time.
• No agent can make, change or revoke a connection. Only you can, inside Righto.
• An agent sends what it reads to its own AI provider. Give an agent access only if you accept that.

The app

• Righto is signed and notarized by Apple, so your Mac checks it before it opens it for the first time.
• Updates come only from rightobooks.com, and Righto checks that each update really comes from us before it installs it.

More detail is in the help center: your business file, password and recovery key and agent access. If you find a security problem, tell us through the contact page.