Special Get Free Early Access for our Beta Phase Join Waitlist
Privacy Policy

At Riffbot.ai, we respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, store, and use your data. By using our website or services, you consent to the collection, storage, and use of your personal data in accordance with this policy.



What information do we collect?

There are 2 types of users for Riffbot.ai.

Type A, the users of the platform of Riffbot.ai that are creating their own versions of Riff, a Reflection Bot to use where and as they see fit (always according to our terms and conditions).

Type B, the users that converse with a Reflection Bot that a type A user has created.


Type A users:

When you sign up for Riffbot.ai, we collect your email address, first name, surname, payment details, and invoicing details. We use this information to provide our services to you and to communicate with you about your account. We also collect basic cookies for the basic functionality of the web app and anonymized Google Analytics for tracking.

Type B users:

When engaging in conversation with a Reflection Bot, the starting date and time is recorded along with a country of origin derived from the IP. Furthermore, the whole interaction, messages from both the user and the Reflection Bot, are collected. Moreover, IF the option is enabled by a type A user, you are prompted to enter a name at the start of the interaction and/or an email at the end of it, which are also collected. No login is required for this type of interaction.



How do we use your information?

We use your personal data solely for the purpose of providing our services to you. We do not share any user data with third parties. The data is retained for as long as the user has an active profile with the service. We also use anonymized Google Analytics to help us understand how our website is being used and to improve our services.



How do we store your information?

We store your personal data on servers that are encrypted, meet the highest industry standards and are backed up daily. We take reasonable steps to protect your data from unauthorized access, disclosure, alteration, or destruction. These safeguards include physical, technical, and administrative measures to ensure data security. If personal data needs to be transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place as required by the GDPR. These safeguards may include, among others, standard contractual clauses, Privacy Shield certification. In the rare case of a data breach or security incident, we will inform our user base of the incident through email and guide them to any action needed.



Do we comply with data protection regulations?

Yes, we comply with GDPR (General Data Protection Regulation), CCPA (California Consumer Privacy Act), FERPA (Family Educational Rights and Privacy Act) and other relevant data protection regulations. We are committed to protecting your privacy and ensuring that your personal data is processed fairly and lawfully. We regularly review our policies and procedures to ensure continued compliance with all regulation guidelines.


Moreover, regarding FERPA, Riffbot.ai is except under the following directory:

“The FERPA school official exception is more likely to apply to schools’ and districts’ use of online educational services. Under the school official exception, schools and districts may disclose PII from students’ education records to a provider as long as the provider: 1. Performs an institutional service or function for which the school or district would otherwise use its own employees; 2. Has been determined to meet the criteria set forth in the school’s or district’s annual notification of FERPA rights for being a school official with a legitimate educational interest in the education records; 3. Is under the direct control of the school or district with regard to the use and maintenance of education records; and 4. Uses education records only for authorized purposes and may not re-disclose PII from education records to other parties (unless the provider has specific authorization from the school or district to do so and it is otherwise permitted by FERPA).”



What happens if Riffbot.ai shuts down or is acquired by another company?

If Riffbot.ai shuts down, all data is deleted.

If Riffbot.ai is acquired by another company, users are informed and then the data ownership is passed over to the new owner.



How can you contact us about privacy concerns?

If you have any privacy-related concerns or questions, please contact our privacy team at [email protected]. We will respond to your query as soon as possible.



Can you opt-out of Google Analytics tracking?

Yes, you can opt out of Google Analytics tracking by using the official Google Analytics Opt-Out Extension.



Changes to this policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on our website. You should check this page regularly to stay up to date with any changes.