1. Introduction

Welcome to RRise ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and related services (collectively, the "Services"). By using our Services, you agree to the collection and use of information in accordance with this policy.

We are committed to protecting your privacy and ensuring the security of your personal information. This policy applies to all users of our Services, regardless of their location.

2. Information We Collect

2.1 Personal Information

We collect information you provide directly to us, including:

• Account Information: Name, email address, and other registration details
• Profile Information: User preferences, goals, habits, and tasks data
• Payment Information: Billing details processed securely through Stripe (we do not store complete credit card numbers)
• AI Configuration: API keys for BYOK (Bring Your Own Key) functionality (encrypted and stored securely)

2.2 Automatically Collected Information

We automatically collect certain information when you use our Services:

• Usage Data: Pages visited, features used, time spent, and interaction patterns
• Device Information: IP address, browser type, operating system, and device identifiers
• AI Usage Metrics: Token usage, API calls, and provider-specific statistics
• Cookies and Similar Technologies: As described in our Cookie Policy

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve our Services
• Personalization: To deliver AI-powered insights, recommendations, and personalized experiences
• Account Management: To create and manage your account, authenticate your identity
• Payment Processing: To process subscriptions and payments through Stripe
• Communication: To send you transactional emails, updates, and support communications
• Analytics: To analyze usage patterns, improve our Services, and develop new features
• Security: To detect, prevent, and address technical issues and fraudulent activity
• Legal Compliance: To comply with legal obligations and enforce our terms

4. Information Sharing and Disclosure

We may share your information in the following circumstances:

• Service Providers: With third-party service providers who perform services on our behalf (e.g., Supabase for database hosting, Stripe for payment processing, AI providers for API services)
• Business Transfers: In connection with any merger, sale of assets, financing, or acquisition of all or a portion of our business
• Legal Requirements: When required by law, court order, or government authority
• Protection of Rights: To protect our rights, property, or safety, or that of our users or the public
• With Your Consent: With your explicit consent for other purposes

We do not sell your personal information to third parties for their marketing purposes.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: Data is encrypted in transit using TLS/SSL and at rest using industry-standard encryption
• Access Controls: Strict access controls and authentication mechanisms for our systems
• Secure Storage: API keys and sensitive data are encrypted using AES-256 encryption
• Regular Audits: Regular security assessments and penetration testing
• Compliance: Compliance with GDPR, CCPA, and other applicable data protection laws

Despite our efforts, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal information for as long as necessary to provide our Services and fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

• Account Data: Retained while your account is active and for a reasonable period after account closure
• Usage Data: Retained for analytics and service improvement purposes
• Payment Data: Retained as required for financial record-keeping and compliance
• AI Usage Logs: Retained for billing, analytics, and abuse prevention

Upon account deletion, we will delete or anonymize your personal information unless retention is required by law.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal exceptions)
• Portability: Request transfer of your data to another service
• Objection: Object to processing of your personal information
• Restriction: Request restriction of processing of your personal information
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact us at rrisewebsite@gmail.com. We will respond to your request within 30 days.

8. Children's Privacy

Our Services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "Last Updated" date. Your continued use of our Services after the effective date of the revised policy constitutes your acceptance of the changes.

11. California Consumer Privacy Act (CCPA)

If you are a resident of California, you have specific rights regarding your personal information:

• Right to Know: Request disclosure of categories of personal information we have collected
• Right to Delete: Request deletion of your personal information
• Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights

To exercise these CCPA rights, please contact us at rrisewebsite@gmail.com.