Privacy Policy

This Privacy Policy ("Policy") describes how Rizora, Inc., a Delaware corporation ("Rizora," "we," "us," or "our"), collects, uses, stores, and shares information when you access or use the Rizora platform, website, and related services (collectively, the "Platform"). By creating an account or using the Platform in any way, you agree to the practices described in this Policy.

1. Overview & Acceptance

Rizora is a paid messaging platform. To operate it, we collect certain information about you, your messages, and your transactions. This Policy explains what we collect, why we collect it, and your rights regarding that information.

This Policy is incorporated into and subject to our Terms of Service. Capitalized terms not defined here have the meanings given in the Terms of Service.

2. Information We Collect

We collect information you provide when you create an account, send messages, upload images, or make purchases. This includes your account details (received from your sign-in provider), message content, payment transaction records, gem balance and history, and any other information you submit through the Platform.

We also collect certain information automatically when you use the Platform, such as your IP address, device and browser type, and usage data through server logs and similar technologies.

3. How We Use Your Information

We use the information we collect to operate the Platform, process payments, enforce our policies, prevent fraud and abuse, moderate content, improve the Platform, communicate with you about your account, and comply with applicable law. We do not use your personal information for targeted advertising.

4. Cookies & Tracking

We use cookies and similar technologies to authenticate your account and maintain your session. We may also use analytics tools to understand aggregate usage patterns. We do not use tracking technologies for cross-site behavioral advertising, and we do not sell or share your data with advertising networks. You can manage cookies through your browser settings, though disabling essential cookies may affect Platform functionality.

5. Information Sharing

We do not sell your personal information. We share information only in the following circumstances: Service providers—with Stripe, Supabase, Cloudflare, Google, and other vendors who process data on our behalf under confidentiality and data protection obligations; Legal compliance—when required by law, court order, subpoena, or lawful request from governmental or regulatory authorities, including to comply with mandatory reporting obligations (e.g., CSAM reporting to NCMEC); Protection of rights—when we believe disclosure is necessary to protect the rights, property, or safety of Rizora, our users, or the public; Business transfers—in connection with a merger, acquisition, asset sale, or similar transaction, in which case your information may be transferred as a business asset, subject to continued privacy protections; and with your consent—in circumstances where you have provided explicit consent.

6. Data Retention

We retain your information for as long as necessary to provide the Platform and your account; comply with applicable legal obligations (e.g., financial recordkeeping requirements); resolve disputes and enforce our agreements; and detect and prevent fraud.

When your account is deleted, we will remove or anonymize your personal information within a reasonable time, except where retention is required by law, for dispute resolution, or for fraud prevention purposes. Backups and archived records may be retained for a longer period in accordance with our data management practices.

7. Security

Rizora implements reasonable technical and organizational safeguards to protect your information against unauthorized access, disclosure, alteration, or destruction, including encrypted data transmission (TLS); access controls limiting data access to authorized personnel; and third-party security features provided by Stripe, Supabase, and Cloudflare.

No system is perfectly secure. We cannot guarantee the absolute security of your information. Use of the Platform is at your own risk. If you suspect a security breach affecting your account, contact us immediately at rizorapp@gmail.com.

8. Your Rights

8.1 General Rights

You may contact us at rizorapp@gmail.com to access a copy of the personal information we hold about you; correct inaccurate or incomplete personal information; delete your account and associated personal information (subject to our retention obligations); or restrict certain processing of your data.

We will respond to verifiable requests within a reasonable time, consistent with applicable law.

8.2 California Residents — CCPA Rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA): Right to Know—request disclosure of the categories and specific pieces of personal information we have collected about you, and how it is used and shared; Right to Delete—request deletion of your personal information, subject to certain exceptions; Right to Correct—request correction of inaccurate personal information; Right to Opt-Out of Sale/Sharing—we do not sell or share your personal information for cross-context behavioral advertising; and Right to Non-Discrimination—we will not discriminate against you for exercising your CCPA rights.

To exercise these rights, contact us at rizorapp@gmail.com. We may need to verify your identity before processing your request.

8.3 EEA/UK Residents — GDPR Rights

If you are located in the European Economic Area or United Kingdom, you may have the following rights under the General Data Protection Regulation (GDPR) or applicable UK data protection law: right of access (Art. 15 GDPR); right to rectification (Art. 16 GDPR); right to erasure (Art. 17 GDPR); right to restriction of processing (Art. 18 GDPR); right to data portability (Art. 20 GDPR); right to object (Art. 21 GDPR); and right to lodge a complaint with your local data protection authority.

Our lawful bases for processing include: performance of a contract (providing the Platform), compliance with legal obligations, and legitimate interests (fraud prevention, security). Where we rely on consent, you may withdraw it at any time.

To exercise your rights, contact us at rizorapp@gmail.com.

9. Age Restrictions

The Platform is intended for users who are 18 years of age or older. We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected information from a user under 18, we will delete it promptly and terminate the account. If you believe a minor has provided us with personal information, please contact us at rizorapp@gmail.com.

10. Third-Party Links

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to This Policy

We may update this Policy from time to time. When we do, we will post the revised Policy on the Platform with an updated "Last Updated" date. If we make material changes, we will provide additional notice (such as an in-app notification or email). Your continued use of the Platform after the effective date constitutes acceptance of the revised Policy.

12. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

Rizora, Inc.

Email: rizorapp@gmail.com

Registered Agent: Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713