Your data

Privacy Policy

Riff is built to need as little of your data as possible. Here is exactly what we do and don't collect.

Last updated: 2026-07-11

1. Summary

Riff, operated by Talrax, is privacy-first by design. We store as little as possible: your recent runs are kept only in your own browser’s local storage, and we keep no separate database of the content you paste — it is processed to generate your posts and not retained afterward.

2. Content you paste

The text you submit is sent to our serverless function only to generate your posts, and the results are returned to you. When the offline engine is used, the transformation happens without any third-party call. We do not sell your content, and we do not use it to train models. We do not retain your input after the request completes beyond transient logs needed to operate and secure the Service.

3. Information we collect

  • Local-only data:your generation history and credit counter live in your browser’s local storage and never leave your device unless you send a generation request.
  • Technical logs: standard request metadata (such as IP address and timestamps) is processed transiently to apply rate limits and protect the Service against abuse.
  • Account data (if enabled): if you create an account, our authentication provider processes your email and sign-in details on our behalf.

4. Payments

When paid plans are enabled, payments are processed by our Merchant of Record, Paddle.com Market Limited. Paddle collects the billing information needed to complete your purchase and remit taxes; we never see or store your full card details. Please review Paddle’s own privacy notice for how it handles payment data.

5. Third-party processors

We rely on a small number of service providers to run Riff, including our hosting platform, and — only when the corresponding feature is enabled — an authentication provider, a payment processor (Paddle), and an AI model provider. Each processes data solely to deliver its part of the Service.

6. Cookies

The core studio does not use tracking or advertising cookies. Where authentication or billing is enabled, those providers may set cookies strictly necessary to keep you signed in and to complete checkout.

7. Your rights

You can clear your local history and credits at any time from within the studio. Where we hold account data, you may request access to or deletion of that data by contacting us. We honour applicable data-protection rights, including under the GDPR and CCPA.

8. Contact

For any privacy question or request, email support@talrax.com.