RiddleRise Privacy Policy
The short version
- We collect what we need to run your account and your AI agent: your email, the knowledge you add, and the chats on your website.
- Chat messages and relevant parts of your knowledge are sent to our AI provider (Groq) to write each answer. It doesn't use them to train AI models.
- We don't sell personal data, and we don't show ads.
- You can delete your account, bots, knowledge and chats at any time from the dashboard.
- Who we are
- Customers and visitors
- What we collect
- How we use it
- How AI answers are made
- Who we share it with
- Cookies and browser storage
- How long we keep it
- Security
- Your choices and rights
- Children
- Changes and contact
1. Who we are
RiddleRise AI Agent (“AI Agent”, “the service”) is run by RiddleRise, an independent technology studio in Bangladesh (“RiddleRise”, “we”, “us”). This policy explains how we handle personal data when you use AI Agent at riddlerise.com/ai-agent, its dashboard, chat widget and API. Questions: contact@riddlerise.com.
This policy covers AI Agent only. Our games and apps have their own privacy policies.
2. Customers and visitors
Customers are businesses and people who create an AI Agent account. Visitors are people who chat with a customer's agent on the customer's website.
For visitor chats on a customer's website, the customer decides to use AI Agent and what it should answer, and we process those chats on the customer's behalf. If you are a visitor, the website you were on is responsible for telling you about its chat; you can also contact us and we'll help.
3. What we collect
From customers
- Account details: email address, optional name, your password (stored only as a secure hash), plan, and the date you accepted our Terms.
- Your agent's content: bot names, greetings, colours, logos, instructions, and knowledge you add — website pages we fetch at your request, files you upload and FAQs you write.
- Usage: message counts, bots and API keys created, and when you last logged in. API keys are stored only as secure hashes.
- Billing (when paid plans are available): payments are handled by Polar, our payment provider and merchant of record. We receive your name, email, plan and subscription status — never your full card number.
- Messages you send us, for example support emails or chats.
From visitors chatting with an agent
- Chat content: the messages a visitor types and the answers the agent gives.
- Chat context: the web page where the chat was opened, and a random ID saved in the visitor's browser so the conversation continues across pages.
- Contact details a visitor chooses to give, such as a name or email when asking to talk to a person.
Technical data
Like most websites, our servers receive IP addresses and browser information. We use IP addresses to prevent abuse (for example rate limits), and they may appear in short-lived server logs.
Visitors and customers should not share sensitive information — such as card numbers, passwords, or health details — in chats.
4. How we use it
- To provide the service: run your account, build your agent's knowledge, and answer your visitors.
- To send service emails: welcome emails, password-reset links and important account notices.
- To keep the service safe: preventing spam, abuse and security incidents, and enforcing plan limits.
- To support you and improve AI Agent, for example by fixing errors or improving answer quality.
- To meet legal obligations.
We don't sell personal data, use it for advertising, or train our own AI models on your content.
5. How AI answers are made
When a visitor sends a message, we pick the most relevant parts of the agent's knowledge and send them, together with the recent conversation and the agent's instructions, to our AI model provider, Groq (United States). Groq returns an answer, which we show in the chat. For questions that need current information, Groq may run a web search. If Groq is unavailable, the answer is written by an AI model running on our own server instead.
Groq processes this data only to generate answers. It doesn't use it to train AI models, and it may keep it briefly (up to 30 days) only to keep its service reliable and prevent abuse.
RiddleRise's own support chat (on riddlerise.com, not our customers' agents) may also use Google Gemini as a backup. Google may use messages sent to that chat to improve its products, so please don't share sensitive information there.
Answers are produced automatically and can be inaccurate — see our Terms.
6. Who we share it with
We share personal data only with service providers that help us run AI Agent, and only as needed:
| Provider type | What for |
|---|---|
| Server hosting (Contabo) | Runs the AI Agent servers and stores account and chat data. |
| Website and email hosting (Namecheap) | Hosts riddlerise.com and sends account emails. |
| AI model providers (Groq; Google for our own support chat) | Write answers to chat messages, as described above. |
| Payments (Polar) | Checkout, subscriptions, invoices and taxes, once paid plans are available. |
| Google Fonts | Loads the typeface used on our pages; Google receives your IP address. |
We may also disclose data if the law requires it, to protect people's safety or our rights, or as part of a sale or reorganisation of our business. These providers may be located outside your country, including in the European Union and the United States.
7. Cookies and browser storage
We don't use advertising or tracking cookies. We use your browser's storage for two things: keeping you logged in to the dashboard, and keeping a visitor's chat going while they move between pages. Clearing your browser storage removes them.
8. How long we keep it
- Account and agent content: while your account is open. When you delete a bot, its knowledge and chats are deleted. When you delete your account, your bots, knowledge, API keys and chats are deleted.
- Visitor chats: for as long as the customer's bot exists, unless deleted earlier.
- Backups and logs: backup copies and server logs are kept for a limited time and then overwritten or deleted.
- Billing records: kept as long as tax and accounting law requires.
9. Security
All connections use HTTPS. Passwords, login sessions and API keys are stored as one-way hashes, and admin access is restricted. No system is perfectly secure, but we work to protect your data and will tell affected customers about serious incidents without undue delay.
10. Your choices and rights
You can update your details, delete bots and knowledge, revoke API keys and delete your whole account from the dashboard. You can also email us to ask for a copy of your data, to correct it, or to delete it, and we'll reply within 30 days. Depending on where you live, you may have further rights — such as objecting to processing or complaining to a data protection authority — and you can use them by contacting us.
Visitors who want their chat removed can contact the website owner or us.
11. Children
AI Agent is a business service and is not meant for children. Customers must be at least 18 years old. Customers must not use AI Agent on websites aimed at children under 13.
12. Changes and contact
If we change this policy, we'll update the date at the top and, for important changes, tell customers by email or in the dashboard. Contact: RiddleRise, contact@riddlerise.com.