Back to Riff

Privacy Policy

Effective date: 22 April 2026

Idea Junkies Ltd ("we", "us", "our") is the data controller for personal data processed through Riff. This policy explains what we collect, why, and your rights under the UK GDPR and Data Protection Act 2018.

Who we are

Idea Junkies Ltd, company number 13851834, registered at 7 Lansdowne Terrace, Gosforth, NE3 1HN. Contact: hello@ideajunkies.co.uk

What we collect

Account data: Name, email address, password (hashed), business details you provide during onboarding.

Content data: Text and voice recordings you submit, drafts generated for you, your voice profile and linguistic analysis derived from your inputs.

Billing data: Handled by Paddle.com, our Merchant of Record. We receive confirmation of payment and subscription status only — we do not store your card details.

Usage data: IP address, browser type, device information, pages visited, and interactions with the Service. Collected via cookies and analytics.

Why we use it and the lawful basis

Purpose Lawful basis
Providing the Service to youPerformance of a contract
Processing payments via PaddlePerformance of a contract
Sending service emailsPerformance of a contract
Sending marketing emailsConsent (you can withdraw anytime)
Improving the ServiceLegitimate interest
Complying with legal obligationsLegal obligation

Who we share data with

We share data with a small set of processors under written contracts that require them to protect your data:

  • Paddle — payments, billing, and VAT
  • Xano — backend infrastructure and database hosting
  • Amazon Web Services — hosting and NLP processing
  • Anthropic — Claude API for content generation
  • OpenAI — Whisper API for voice transcription
  • Tavily — web research for content generation
  • Loops — transactional and marketing email

Some of these providers are based outside the UK. Where data is transferred internationally, we rely on UK International Data Transfer Agreements, the UK Addendum to the EU Standard Contractual Clauses, or equivalent safeguards.

How long we keep your data

We keep your account and content data for as long as your subscription is active. If you delete your account, we retain your data for 30 days before permanent deletion, so you can restore it if you change your mind. After 30 days, we delete it permanently, except where we are legally required to keep records (for example, billing records for tax purposes, held for 6 years).

Your rights

Under UK GDPR you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your data (subject to legal retention requirements)
  • Restrict or object to processing
  • Data portability (receive your data in a machine-readable format)
  • Withdraw consent where processing is based on consent

To exercise any of these rights, email hello@ideajunkies.co.uk. We will respond within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or 0303 123 1113.

Cookies

We use cookies to keep you signed in, remember your preferences, and understand how the Service is used. You can control cookies through your browser settings.

Changes

We may update this policy. If we make material changes, we'll notify you by email or in-product before they take effect.