rizzora.ai Privacy Policy

This Privacy Policy ("Privacy Policy" or "Policy") describes how VOCOSMOS PTE. LTD. (a company registered in Singapore, hereinafter "rizzora.ai", "we", "us" or "our") and its affiliates collect, use, store, disclose and protect your personal information.

This Policy applies to the rizzora.ai website, mobile applications and any other services that link to this Policy (collectively, the "Services"). The Services currently provide text-based interactions only and do not collect voice or video data.

Capitalized terms not defined herein have the meanings set forth in our Terms of Service.

Special Notice

• EU/UK Users: Please also refer to the EU/UK-specific provisions in this Policy.
• U.S. Users (especially California): Please also refer to the U.S.-specific provisions in this Policy.

1. Information We Collect

We collect information based on how you use the Services.

Information you provide directly:

• Identifiers (name, email, username, account ID).
• Demographic information (date of birth, approximate location, language preferences).
• Interest preferences, account settings and character preferences.
• Payment information (processed by third-party payment providers; we do not store full payment card details).
• Chat content, character descriptions you create, and other content generated through interaction with the Services.

Information collected automatically:

• Device and usage data (IP address, device type, browser type, operating system, access times, approximate geolocation).
• Interaction behavior (page views, conversation duration, feature usage).
• Cookies and similar technologies (used for login status, security and analytics; see our Cookie Notice).

From other sources:

• Third-party login information (basic profile data provided when signing in with Apple, Google or Facebook).
• Publicly available data (used only for service improvement and in compliance with applicable law).

We do not knowingly collect personal information from individuals under 18 years of age. The Services are intended solely for users aged 18 and above. If we become aware that we have inadvertently collected information from a minor, we will delete it promptly.

2. How We Use Information

We use the information we collect for the following purposes:

• To provide, maintain and personalize the Services (including character matching, conversation memory and personalized recommendations).
• To improve AI models and algorithms (preferring anonymized or aggregated data).
• To process subscriptions, payments, Coin purchases and account management.
• To protect the security of the Services and prevent fraud and abuse.
• To comply with legal obligations, respond to law enforcement requests or protect our rights.
• To communicate with you (service notices, policy updates; marketing communications only with your consent, which you may withdraw at any time).

Generative AI-related use:

To continuously improve service quality and AI model performance, your chat content, preferences and interaction data may be used for model training and optimization. We prefer anonymized or aggregated processing. By using the Services, you understand and agree to the above uses. If you wish to stop new data from being used for model training, you may do so by deleting your account. After account deletion, we will stop using your new data for training; data that has already been used for training and anonymized cannot be fully removed from trained models.

Legal bases for processing (EU/UK users):

We primarily process your data on the following bases: performance of a contract with you, our legitimate interests (where they do not override your rights), your consent, and legal obligations.

3. When We Disclose Information

We may disclose information in the following circumstances:

• To necessary service providers (cloud services, payment processing, data analytics, customer support), who process data only on our instructions and are bound by contract.
• When required by law, court order, or to protect the rights, safety of us and others.
• In connection with a business transfer (merger, acquisition, etc.), subject to this Policy.
• With your explicit consent.

We do not sell your personal data.

California users: We do not sell or share personal data for cross-context behavioral advertising. You may exercise your "Do Not Sell or Share" rights by emailing us.

4. Your Rights and Choices

You have the following rights (depending on your location):

General rights:

• Access, correct or delete your personal information.
• Restrict or object to certain processing.
• Data portability (where technically feasible).
• Withdraw consent (without affecting the lawfulness of processing before withdrawal).
• Opt out of marketing communications.

Regarding AI model training: By using the Services, you agree that related data may be used for model improvement (preferring anonymization/aggregation). After you delete your account, we will stop using your new data for training.

Singapore (PDPA): Rights of access, correction and deletion.

EU/UK (GDPR): Full data subject rights, including the right to object to automated decision-making/profiling.

United States (CCPA/CPRA and other state laws): Right to know, delete, correct, opt out of sale/sharing, and limit use of sensitive personal information.

To exercise your rights: Please use account settings or email [email protected]. We will respond within the timeframes required by applicable law (typically 30–45 days). We may need to verify your identity.

5. Data Security and Retention

We implement reasonable technical and organizational measures to protect data, including encryption, access controls and regular security assessments. However, no system is completely secure.

Retention periods:

• Account information: During the life of the account and for a reasonable period after closure (typically 12–24 months, or longer if required by law).
• Chat records: While needed to provide memory features of the Services; you may delete them at any time; after account closure, processed according to the above periods.
• Payment records: Retained as required by tax and accounting laws.
• Data used for model training: May be retained long-term after anonymization; identifiable data will no longer be used for new training after account deletion.

6. International Data Transfers

Your data may be transferred to locations outside Singapore (including regions where our cloud service providers operate). We ensure an adequate level of protection consistent with PDPA, GDPR and CCPA requirements through Standard Contractual Clauses (SCCs), adequacy decisions or other legally recognized mechanisms.

7. Children's Protection

The Services are intended solely for users aged 18 and above. We do not knowingly collect personal information from individuals under 18. If we become aware of such collection, we will promptly delete the information and terminate the corresponding account.

If you are a parent or guardian and discover that a minor has used the Services without authorization, please contact us immediately and we will assist in addressing the matter.

8. Policy Updates

We may update this Policy from time to time. Material changes will be notified through in-service notices or email, and the effective date will be updated. Continued use of the Services after an update constitutes acceptance of the revised Policy (unless applicable law requires separate consent).

9. Contact Us

For questions, to exercise your rights or to lodge a complaint, please contact:

Email: [email protected]

Company: VOCOSMOS PTE. LTD.

139 CECIL STREET, #03-03, YSY BUILDING, SINGAPORE 069539

EU users may contact our data protection contact (if designated). You also have the right to lodge a complaint with your local data protection authority.