Privacy Policy

This policy applies to buyer interactions with the RIFF AI research assistant and seller use of the RIFF platform.

We collect only what is required to operate and improve the service.

Buyer Interactions

• Questions, messages, and prompts submitted to the AI research assistant
• Interaction signals such as timestamps, page context, and engagement events

Seller Provided Content

• Documents, transcripts, product materials, and training inputs uploaded by sellers

RIFF does not intentionally collect sensitive personal information and does not require buyers to create accounts unless configured by the seller.

Information is used to:

• Provide accurate and relevant responses to buyer questions
• Improve answer quality and relevance over time
• Help sellers understand buyer interests and frequently asked questions
• Maintain and improve the service

We do not sell buyer data. We do not use buyer data for advertising.

RIFF uses third-party AI services to process questions and generate responses. These services include:

• OpenAI for language model processing
• Anthropic for language model processing
• Cloud infrastructure providers for hosting and data storage

Subprocessors are contractually bound to maintain confidentiality and security standards consistent with this policy.

Seller Content: Sellers retain full ownership of all content they upload to RIFF. Sellers may delete their content at any time.

Buyer Interactions: Conversation data associated with a seller's knowledge base is accessible to that seller. Buyers may request deletion of their conversation history by contacting the seller or RIFF directly.

RIFF acts as a data processor on behalf of sellers, who act as data controllers for buyer interactions on their behalf.

• Conversation data is retained for as long as the seller maintains their RIFF account
• Sellers may request deletion of specific conversations or all data
• Upon account termination, data is deleted within 90 days
• Aggregated, anonymized data may be retained for service improvement

RIFF maintains strict separation between different sellers' data. Each seller's knowledge base and buyer conversations are isolated and inaccessible to other sellers.

Buyer data from one seller's interface is never shared with or visible to other sellers.

RIFF implements industry-standard security measures including:

• Encryption of data in transit (TLS 1.2+) and at rest
• Access controls and authentication for all platform access
• Regular security assessments and monitoring
• Secure cloud infrastructure with SOC 2 compliant providers

For privacy-related questions, data access requests, or concerns, please contact:

Email: privacy@getriff.ai

Website: getriff.ai