Rifflai Privacy

This page applies when you visit or use Rifflai (the "Service"). It describes the information handled by the Service and the choices currently available to you.

The information handled depends on how you use the Service. It may include:

• account information, such as email address, user ID, username, authentication status, and session information;
• information received from Google if you choose Google sign-in;
• profile information, such as display name, biography, avatar, and links;
• AI share links and the conversations, prompts, responses, images, files, citations, and metadata retrieved from them;
• drafts, selections, edits, source and provenance records, and published content;
• comments, reactions, follows, bookmarks, reports, appeals, and other community activity;
• technical and security information, such as IP address, request time, browser or device information, error records, and abuse signals; and
• messages and information you send when contacting Rifflai.

AI conversations may contain personal or confidential information about you or someone else. Do not submit credentials, private communications, medical or financial records, trade secrets, precise location information, or another person's personal information without authorization.

Rifflai uses information as reasonably needed to:

• create and secure accounts;
• import, organize, preview, publish, and display content at your direction;
• maintain source and composition records;
• operate community features;
• detect abuse, privacy risks, and security problems;
• review reports and enforce the User Agreement and Community Rules;
• delete content or accounts through available controls;
• troubleshoot, maintain, and improve the non-model-training operation of the Service; and
• comply with legal obligations and protect users, third parties, and the Service.

Profile information and content you publish may be visible to anyone and may be indexed, copied, quoted, or archived by others.

Imported conversations and drafts are intended to remain private to your account until you publish them, although Rifflai and service providers may process them to provide, secure, troubleshoot, or moderate the Service.

Review every preview before publishing. Removing content from Rifflai does not remove copies independently made by other people, search engines, archives, or third-party services.

Rifflai relies on service providers for hosting, databases, storage, authentication, communications, job processing, security, and content-safety functions. The current architecture may involve Vercel, Supabase, Railway, Google, and the AI platform or content host associated with a share link.

When you request an import, Rifflai may send the share identifier, server IP address, request time, and ordinary HTTP information to the relevant AI platform or content host. Those services handle information under their own terms and privacy notices.

Rifflai may disclose information when reasonably necessary to service providers acting for the project, to address security or rights complaints, to comply with valid legal process, or to protect a person from serious harm.

Rifflai currently does not sell personal information, share it for cross-context behavioral advertising, or use third-party advertising or behavioral analytics SDKs.

Rifflai does not use private or public user content to train Rifflai or third-party generative AI models. Any future optional training program would require a separate, clear opt-in.

Rifflai keeps information only while it is reasonably needed to operate the Service, secure the Service, resolve a report or dispute, maintain necessary technical records, or comply with law.

The Service includes cleanup processes intended to reduce stored raw import data, failed imports, unused uploads, and expired operational records. Exact timing may vary because of system operation, backups, active security or rights matters, and legal requirements.

You may use available account controls to delete eligible content or close your account. Deleted information may remain temporarily in backups, restricted security records, or records needed for an active dispute or legal obligation.

Rifflai does not promise a universal export, access, correction, or manual-deletion service beyond the controls actually offered, except where applicable law requires otherwise.

Depending on the available product controls, you may:

• update profile information;
• delete eligible posts, comments, imports, assets, or projects;
• close your account;
• choose not to publish an imported conversation; and
• use the privacy request form if you cannot use an available deletion control or want to report a privacy concern.

Submitting a request does not guarantee a particular response time or outcome except where applicable law requires one. Reasonable verification may be required before account information is disclosed or deleted.

Rifflai uses cookies or similar browser storage needed for authentication, security, interface state, and core product operation. The Service currently does not use advertising cookies.

Rifflai uses reasonable technical and organizational measures, but no online service can guarantee complete security.

Do not send passwords, authentication codes, government identity documents, or unnecessary sensitive information through a contact or report form.

This page may be updated as the Service, providers, or legal requirements change. The effective version will show its effective date. Material changes will be presented again when required.

Privacy questions or concerns may be sent to contact@rifflai.com.