Privacy Policy

Overview

Riff is operated by Koilabs LLC, a Wyoming limited liability company ("we", "our", or "us"). This policy explains how we collect, use, and safeguard your information when you use our content creation platform and services.

Registered Address: 5830 E 2nd St, Ste 7000 #32490, Casper, WY 82609

Information We Collect

We collect information you provide directly:

• Account information — Email address, name, and profile details when you create an account
• Interview content — Your spoken or typed responses during interview sessions
• Voice profile data — Patterns learned from your content to match your writing style (vocabulary, tone, structure)
• Generated content — Drafts and published content created through the platform
• Payment information — Processed securely by LemonSqueezy; we do not store your payment card details
• Usage data — How you interact with our platform to improve the service

How We Use Your Information

• To provide and improve our content creation services
• To learn your writing voice and generate content that sounds like you
• To process your subscription and payments
• To send service-related communications (you can unsubscribe from marketing emails)
• To respond to your questions and support requests
• To analyze usage patterns and improve the platform

Voice Learning & Your Content

Riff uses your interview responses and content to build a personalized voice profile. This helps us generate content that matches your unique writing style.

• Your voice profile is private to your account and never shared with other users
• We do not use your content to train general AI models
• You can disable voice learning in your account settings
• You can request deletion of your voice profile at any time

Voice Biometric Clarification:

• We do not collect, store, or analyze biometric identifiers (voiceprints, speaker identification)
• If you use voice input, recordings are transcribed to text and audio is not retained
• Our voice learning analyzes writing patterns (vocabulary, sentence structure, tone) from text only

Data Storage & Security

Your data is stored securely using Supabase, a trusted database provider with enterprise-grade security. We implement industry-standard security measures including:

• Encryption in transit (TLS/SSL) and at rest
• Row-level security ensuring users can only access their own data
• Regular security audits and monitoring

Data Breach Notification: In the event of a data breach that may affect your personal information, we will notify you via email within 72 hours of discovery and provide details about the nature of the breach and steps we are taking to address it.

Third-Party Services & Sub-Processors

We use the following third-party services to provide Riff:

Your content is sent to Anthropic and OpenAI for processing but is not used to train their foundational models. We have agreements in place with these providers prohibiting training on customer data.

We will notify you of any material changes to sub-processors via email with 30 days' notice.

Your Rights

You have the right to:

• Access your personal data and download your content
• Correct inaccurate information
• Delete your account and all associated data
• Disable voice learning while keeping your account
• Unsubscribe from marketing emails at any time
• Request a copy of your data in a portable format (JSON or CSV, delivered within 30 days)

International Users & GDPR

For users in the European Union or European Economic Area:

• Legal basis for processing: We process your data based on (a) performance of our contract with you, (b) your consent for voice learning features, and (c) our legitimate interests in improving the service
• Data transfers: Your data is transferred to and processed in the United States. We ensure appropriate safeguards are in place through standard contractual clauses with our service providers
• Right to complain: You have the right to lodge a complaint with your local data protection authority
• Withdrawal right: EU customers have a 14-day withdrawal right under EU Consumer Protection law

California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected, used, and shared
• Right to request deletion of personal information
• Right to opt-out of sale of personal information — we do not sell your data
• Right to non-discrimination for exercising privacy rights

To exercise these rights, contact privacy@getriff.app

Children's Privacy

Riff is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If we learn we have collected information from a user under 18, we will delete it immediately. If you believe a minor has provided us with personal information, please contact privacy@getriff.app.

Content Ownership

You own your content. All interview transcripts, generated drafts, and published content remain your intellectual property. We claim no ownership over content you create using Riff. You grant us a limited license to process and store your content solely to provide the service.

Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal purposes.

Cookies

We use essential cookies to ensure the website functions properly (authentication, preferences). We may use analytics cookies to understand how visitors use our site. You can control cookie preferences in your browser settings.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or through the platform. Continued use of Riff after changes constitutes acceptance of the updated policy.

Contact

For privacy-related questions or to exercise your rights, please contact us at: privacy@getriff.app