Riffkit

Privacy Policy

Last updated: June 19, 2026

We at Bit Computing Pte. Ltd. (“Riffkit”, “we”, “our”, or “us”) respect your privacy and are committed to keeping your information secure. This Privacy Policy describes how we collect, use, and protect personal information when you use Riffkit (the “Services”). We handle personal data in line with Singapore’s Personal Data Protection Act (PDPA) and, where applicable, the GDPR and CCPA.

1. Personal Information We Collect

Information you provide:

  • Account information: your email address, your name if you sign in with Google, your subscription and transaction history, and payment details (handled by Stripe; see below).
  • Content: the source videos and links, character avatars and personas, product information and images, and creative directions you provide to the Services, and the output generated from them.
  • Communications: your name, contact details, and the contents of any messages you send us.

Information we receive automatically:

  • Log data: your IP address, browser type and settings, and the date, time, and nature of your requests.
  • Usage data: the features you use, the tasks and generations you run, and similar activity.
  • Device data: basic information about the device, operating system, and browser you use.
  • Cookies & analytics: we use a single essential cookie to keep you signed in, and Cloudflare Web Analytics, a privacy-friendly, cookieless service, to understand aggregate traffic. We self-host our fonts, keep third-party tracking to a minimum, and do not run advertising trackers.

2. How We Use Your Information

  • provide, administer, maintain, and analyze the Services (analyzing source videos and generating your videos);
  • process payments and manage your subscription;
  • secure your account, enforce usage limits, and prevent fraud and abuse;
  • communicate with you, including transactional messages such as sign-in codes and account notices;
  • maintain, improve, and develop the Services, including using aggregated or de-identified data; and
  • comply with legal obligations and protect our rights, users, and the public.

We do not send unsolicited marketing or spam.

3. AI Processing

To generate your videos, we send the inputs you provide to AI sub-processors, which return the output to you. We do not sell your personal data, and we do not use your Content to build products for other customers.

4. How We Disclose Information

We may disclose personal information in the following circumstances:

  • Vendors and service providers who help us operate the Services, under contract, including Stripe (payments), OpenRouter (AI text, vision, and image processing), Seedance and MiniMax (AI video generation), Amazon SES (transactional email), Google (optional sign-in), Cloudflare (privacy-friendly, cookieless web analytics, and Cloudflare Turnstile, a bot-protection check on our sign-in page that normally runs invisibly and may occasionally show a verification prompt; its use is subject to the Cloudflare Turnstile Privacy Supplement), and cloud hosting and storage providers.
  • Business transfers: in connection with a merger, acquisition, financing, or sale of assets.
  • Legal requirements: to comply with law, respond to lawful requests, protect our rights or users, prevent fraud, or address security or safety issues.
  • Affiliates: entities under common control with Bit Computing Pte. Ltd., consistent with this Policy.

5. Payments

Payments are processed by Stripe. We do not store your full card details; they are provided directly to Stripe, whose handling of your data is governed by its own privacy policy and the PCI-DSS standard. We retain your subscription status and transaction history.

6. Your Rights

Subject to applicable law (including the PDPA, GDPR, and CCPA), you may request to access, correct, update, delete, or transfer your personal information, and you may withdraw consent or object to or restrict certain processing. We do not sell or “share” personal information as defined by the CCPA. To make a request, contact us at [email protected]. We may need to verify your identity before acting, and you may use an authorized agent where the law allows.

7. Data Retention & Security

We keep your account and Content while your account is active, and for as long as needed to provide the Services or for legitimate purposes such as resolving disputes, security, and legal compliance. After that, we delete or de-identify your personal data; de-identified or aggregated data may be kept indefinitely. We use commercially reasonable technical and organizational measures to protect your information, though no method of transmission or storage is completely secure.

8. International Transfers & Legal Bases

We are based in Singapore. Your data is processed on our hosting servers and by our sub-processors, which may be located in the United States and other countries. Your data may therefore be transferred to and processed outside the country where you live. Where required, including for transfers out of Singapore under the PDPA, we rely on appropriate safeguards to protect it. For users in the EEA, UK, or Switzerland, our legal bases for processing are: performance of our contract with you; our legitimate interests in operating, securing, and improving the Services; your consent; and compliance with our legal obligations.

9. Children

The Services are not directed to children under 13, and we do not knowingly collect their personal data. If you believe a child under 13 has provided us personal data, contact us and we will delete it. If you are 13 or older but under 18, you must have your parent or guardian’s consent to use the Services.

10. Changes to This Policy

We may update this Policy from time to time. We will post the updated version here with a new “Last updated” date, and provide additional notice if required by law. Your continued use of the Services after an update constitutes acceptance.

11. Data Controller & Contact

Bit Computing Pte. Ltd. (data controller)
133 Cecil Street, #11-01A, Keck Seng Tower, Singapore 069535
[email protected]