Privacy Policy

This Privacy Policy explains how Rifly, a brand operated by DUŠAN RADOŠEVIĆ PR DR SOFT 2025 — a sole proprietor (preduzetnik) registered in the Republic of Serbia (Tax ID/PIB 114902918, Reg. No./MB 67941748), registered address Balkanska 40, 11000 Belgrade, Serbia(“Rifly”, “we”, “us”), collects, uses, and protects personal data when you visit rifly.io(the “Site”) or use our products and services, including the Rifly studio and the Rifly Bridge plugin (the “Services”).

1. Data we collect

• Information you provide — name, email address, password (stored only as a salted cryptographic hash), and message content when you create an account or contact us.
• Billing information — processed by our payment provider (Creem); we do not store full card numbers on our servers.
• Usage & content data — MIDI files, prompts, style descriptions, and other inputs you submit to our AI-enabled tools, the audio outputs generated for you, plus basic analytics (pages viewed, device/browser type, approximate location from IP).

2. How we use it

• To provide, operate, secure, and improve the Services.
• To process payments, subscriptions, and invoices.
• To respond to enquiries and provide customer support.
• To detect, prevent, and address fraud, abuse, or security issues.
• To comply with legal obligations.

We do not sell your personal data.

3. Payment processing

Payments are handled by Creem as our merchant of record and payment processor. When you make a purchase, the information needed to complete the transaction is shared with and processed by Creem under its own privacy policy. We receive confirmation of payment and limited billing details, but not your full payment-card data.

4. Sub-processors & sharing

We share data only with service providers that help us run the Services — including payment processing, hosting/CDN, email, analytics, and AI model providers — and only as needed to perform those functions. We may disclose data where required by law.

5. AI inputs & outputs

MIDI files, prompts, and other content you submit to our AI-enabled tools may be transmitted to third-party AI model providers to generate audio. We do not use your private inputs to train public models. Your use of these tools is also governed by our Acceptable Use Policy.

6. Data retention

We retain personal data for as long as needed to provide the Services and to meet legal, accounting, or reporting requirements, after which it is deleted or anonymised.

7. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and object to or restrict certain processing. To exercise these rights, contact us at the address below.

8. Cookies

The Site uses essential cookies (such as the session cookie that keeps you signed in) and may use privacy-friendly analytics to understand aggregate usage. You can control cookies through your browser settings.

9. Contact

Questions about this policy or your data? Email [email protected].