Privacy policy

Last updated: 31 July 2026

Who controls your data

Riffwise is operated by Igor Sarkulov, an individual based in Cyprus. Contact: igor@sarkulov.com.

What we process

How and why we use it

We process this data to provide and secure the service, authenticate users, enforce plan allowances, prevent abuse, answer support or privacy requests, and improve Riffwise from beta feedback. Optional feedback attachments are processed only with your explicit choice. We do not sell personal data, use browser content for advertising, or use it to determine creditworthiness.

Service providers

OpenAI processes writing requests, including relevant attached post media when detected, to generate output. Supabase provides authentication and stores account, entitlement, deletion-request, usage, and beta-feedback records. Netlify hosts the application. Payments are not currently enabled.

Retention

Riffwise does not intentionally store ordinary writing prompts, attached post media, or generated replies in its application database. A feedback report stores conversation text, a generated result, or a screenshot only when you explicitly select and preview that attachment. Feedback reports are kept while needed to investigate and verify a fix, then deleted or anonymized; the initial target is no longer than 90 days after resolution. The extension temporarily keeps the active request and result in Chrome session storage and stores preferences in Chrome sync storage. Account and usage records remain while the account is active.

Your choices and rights

You can disable nearby context, edit every result, choose whether to attach context to feedback, clear your style note, sign out, request deletion in Riffwise Settings, or uninstall. Depending on applicable law, you may request access, correction, erasure, restriction, objection, or portability and complain to a data-protection authority.

Chrome Web Store Limited Use

Riffwise's use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Website content is processed only for the user-invoked writing feature and is not sold or used for advertising.

Security and changes

Hosted requests use HTTPS and API secrets remain server-side. No system can guarantee absolute security. Riffwise is not directed to children under 16. Material changes will be posted here and disclosed in-product when required.