Privacy Policy
This policy explains what Riffroom collects, what it does with it, and how you get it back or get it deleted. It is written to be read, not to be survived.
Who we are
Riffroom is an AI creative companion for YouTube creators, operated at riffroom.ai ("Riffroom", "we", "us"). Riffroom connects to a creator's YouTube channel with their permission and uses that channel's own material to generate and review video ideas, outlines, and scripts for that creator.
Questions about this policy, your data, or deletion: [email protected].
Google user data we access
When you connect your YouTube channel, you grant Riffroom access through Google's OAuth consent screen, which lists the exact scopes requested. You choose whether to grant them, and you can withdraw that access at any time (see Retention and deletion). Depending on the scopes you grant, we access:
- Your Google account identity — the basic profile information (name, email address, profile picture) Google returns for sign-in, used to create and secure your Riffroom account.
- YouTube channel metadata — your channel's title, description, identifiers, and the structure of your uploads.
- Video metadata — titles, descriptions, tags, publish dates, thumbnails, durations, and similar details for the videos on your channel.
- Captions and transcripts — the text of your videos, where available and where you have granted access, so Riffroom can learn how you actually talk and structure an episode.
- YouTube Analytics data — performance data for your own channel, where you have granted that scope, used to understand which of your formats have worked for you.
We do not download or store your video or audio files.
How we use it
We use the data above for one purpose: generating, reviewing, and improving creative work for the creator it came from. Concretely, that means:
- building a profile of your channel's formats, topics, and voice;
- generating episode ideas, titles, premises, beats, shot plans, and thumbnail directions for your channel;
- running automated quality review on those ideas before they are shown to you, and replacing the ones that fail;
- developing ideas you choose into outlines and scripts inside Riffroom;
- operating the service — authentication, storing your work, debugging failures, and preventing abuse.
Per-creator isolation
Your channel data is used only to produce your outputs. Every query and generation in Riffroom is scoped to a single creator: one creator's archive, captions, or analytics are never used to generate ideas for another creator, and are never pooled into a shared corpus across creators. We do not use your Google user data to train general-purpose or foundation AI models.
Service providers
Riffroom runs on third-party infrastructure — hosting, databases, error monitoring, and AI model providers — that process data strictly on our instructions in order to deliver the service to you. Content sent to our AI model providers is sent under agreements that prohibit using it to train their models. We do not otherwise share your Google user data.
Google API Services Limited Use
Riffroom's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
What we never do
- We never sell your data, and we never transfer it for advertising or any other commercial purpose beyond running Riffroom for you.
- We never use it to serve or target advertising, our own or anyone else's.
- We never use it to build data brokerage, credit, or profiling products.
- No human reads your data except in three narrow cases: you explicitly ask us to (for example, when you send us something to help debug a problem); it is necessary for security purposes, such as investigating abuse; or we are required to by law.
Retention and deletion
We keep your channel data and the work generated from it for as long as your account is connected, because that history is what makes the ideas good. You are in control of ending that:
- Revoke access at any time through your Google Account security settings at myaccount.google.com/permissions. Riffroom immediately loses the ability to read anything further from your channel.
- Request deletion by emailing [email protected] from the address on your account. We delete your account, the Google user data we hold for it, and the derived material generated from it within 30 days, except where we are legally required to retain something.
Revoking access in Google stops future access but does not by itself erase what we already hold — email us if you want it deleted as well. Routine encrypted backups may retain copies briefly after deletion; they age out on their normal cycle.
Security
Access tokens and creator data are stored encrypted, access to production systems is restricted to the people who operate the service, and every request is scoped to the authenticated creator. No system is perfect; if a breach affects your data, we will tell you.
Your content
Your channel, your videos, and the ideas and scripts Riffroom produces for you are yours. See the Terms.
Early access and changes
Riffroom is in early access and the product is still changing. If this policy changes in a way that materially affects how we handle your data, we will update the effective date above and notify connected creators by email before the change takes effect.
Contact
Privacy, data, and deletion requests: [email protected]
Everything else: [email protected]