About this policy
Rift Labs LLC (“Rift,” “we,” “us,” or “our”) operates Rift Portal. This policy explains how we handle personal information when you visit our website, sign in, use chat, create images or videos, manage agents, store files, purchase services, or contact us.
By using this website, you agree to this Privacy Policy. If you disagree, cancel any active subscriptions and discontinue use immediately. Cancellation is managed through billing settings; simply stopping use does not cancel a subscription. You may still contact us to exercise your privacy rights.
This policy does not waive your rights under applicable law or replace separate consent where the law requires it. Services you connect to or visit outside Rift have their own privacy policies.
Information we collect
We collect information you provide, information from services you connect, and information generated as you use Rift. Depending on the features you use, this includes:
- Account & sign-in
- Your name, verified email, Discord user ID, profile image, account status, and authentication information. Email sign-in uses your address to send a one-time link. If you sign in with Discord, it supplies profile and verification details. We record session activity and browser/device labels. Staff passkeys use public-key credentials; Rift does not receive your device PIN, fingerprint, or face scan.
- AI content & files
- Prompts, conversations, responses, attachments, extracted document text, uploaded reference media, generated images and videos, filenames, file metadata, folders, and generation settings. Video editing also stores project timelines, scene instructions, source assets, and render information.
- Agents & integrations
- Agent settings, instructions, custom skills, connection credentials, and operational history. Connected Discord features can process server/channel IDs, sender identifiers, messages, responses, and delivery activity, including messages from people who do not have a Rift account.
- Payments & usage
- Subscription and purchase details, credits, invoices, tax information, payment status, transaction references, model usage, and charges. Stripe processes payment information. Rift also receives payment-method identifiers, limited details such as brand and last four digits, and payment fingerprints used to detect related accounts and abuse.
- Support & safety
- Support tickets, messages, reports, appeals, staff notes, moderation records, enforcement decisions, and records of administrative actions. These may include content or account information needed to investigate a request.
- Technical information
- Network and request information, including IP addresses processed by our infrastructure, browser information, timestamps, errors, security events, and service performance. We use pseudonymous identifiers for some abuse controls; pseudonymous data is not necessarily anonymous.
Content you upload may contain personal or sensitive information about you or others, including faces or voices. Only provide information you are authorized to share. Do not include passwords, payment-card details, or unnecessary sensitive information in prompts or support messages.
How we use information
We use information to authenticate you, provide requested AI features, save your work, run agents and integrations, process payments, calculate usage, resolve support requests, maintain service reliability, prevent fraud and misuse, and meet legal obligations.
Where applicable data-protection law requires a legal basis, these purposes may rely on performing our agreement with you, our legitimate interests in operating and protecting the service, compliance with legal obligations, or consent for processing that requires it. If we rely on consent, you can withdraw it; this does not affect processing that was lawful before withdrawal.
Account and authentication information is needed to provide protected features. Content is needed to carry out the requests you submit, and payment information is needed for paid services. If you choose not to provide required information, we may be unable to provide the corresponding feature.
AI, agents & moderation
Model processing and connected agents
To fulfill a request, we send the relevant prompt, conversation context, files or references, and generation settings to AI routing and model providers. Requests may also include pseudonymous account identifiers and request or conversation identifiers. Agents can use history associated with their owner’s account and information from configured integrations.
Connected Discord channels and other tools receive information when your agent uses them or sends a reply. Channel members and service operators may be able to see or retain that information. Consider who has access to a channel before connecting an agent or sharing content there.
Safety review and automated restrictions
Automated safety checks can block requests or responses. We retain limited visible request and response text for moderation and support even when optional AI activity logging is disabled. Authorized staff may review relevant content, reports, and account records; staff content access is audited.
Fraud and account-protection systems may associate accounts using login, email, or payment identifiers. Matching restricted identities or shared payment fingerprints can result in automatic account restrictions or subscription cancellation actions. To dispute a decision or request human review, use Support or email hello@rift-labs.com.
Provider retention and model training
AI providers have their own retention and data-use terms, which can vary by model, provider, and service configuration. Do not assume that requests have zero retention or that every provider excludes model training. Disabling Rift’s optional logs does not disable provider processing, saved history, or required safety records. Contact us before submitting content that requires specific provider restrictions.
Who receives information
Information is shared as needed to operate the features you use, including with:
- AI services: routing, inference, media-generation, and moderation providers, including OpenRouter and the model providers handling a request.
- Discord: for sign-in and, if configured, agent messaging and media delivery.
- Amazon Simple Email Service: to deliver one-time email sign-in links to your email address.
- Stripe: for checkout, subscription management, taxes, payments, and fraud prevention.
- Infrastructure providers: hosting, network protection, databases, private file storage, backups, and agent-runtime services.
- Authorized personnel and advisers: to provide support, administer the service, investigate misuse, and address legal, accounting, or security matters.
- Recipients you choose: connected tools, channels, or people to whom you send or make content available.
We may also disclose information when required by law, in response to lawful requests, to protect rights or safety, or in connection with a merger, acquisition, financing, or transfer of the business, subject to applicable legal protections.
Cookies & browser storage
Rift uses cookies for sign-in and security, and browser storage to remember functional choices such as your selected model, Library view, reference folder, or last editor project. Temporary request identifiers help prevent duplicate generation requests. Our infrastructure and connected services may also process connection and security information.
Sign-in cookies can persist across browser restarts; the configured cookie lifetime is up to 400 days, subject to browser limits. Server sessions remain valid until signed out, revoked, or ended by account-security controls. Use Security & sessions to review devices and sign out other sessions.
New chat transcripts are kept in browser memory while server-side history is saved. Older local transcripts may remain until migration or sign-out. Signing out clears account chat data, but some interface preferences and retry identifiers can remain. Your browser’s site-data controls let you remove remaining cookies and local storage. Blocking necessary cookies can prevent sign-in or other features from working.
How long we keep data
Retention depends on the information and the purpose for keeping it. The following schedules apply to the application’s stored content; deletion is processed by background jobs and private-storage cleanup can require retries.
- Chats, attachments & agent activity90 days
- Chat and agent conversation records generally expire after 90 days. Continuing a Rift Chat renews that chat’s expiry. Attachments expire independently; agent activity also has a 90-day schedule.
- Request snapshots & moderation content30 days
- Visible request snapshots, derived moderation text, and optional activity-log content expire after 30 days. A snapshot may contain up to 64,000 characters of input and separately up to 64,000 characters of response text. Completed or failed generation-job request payloads are cleared after 30 days.
- Library media & editor projectsUntil deleted
- Saved files, generation records, editor projects, and related media remain until deleted or included in an applicable content-erasure request. Agent configuration and custom skills require separate account or support handling.
- Account, billing, support & securityPurpose-based retention
- These records are separate from AI-content expiry. They are retained as needed to operate the account, maintain financial records, resolve disputes, prevent abuse, and meet legal obligations. Administrative and enforcement records can remain after account-content erasure. Some support or administrative records may contain personal information or message text.
Backups, stored object versions, and agent-runtime copies require separate cleanup from the live application. Their handling is part of an official deletion request where applicable; a completed action in the interface does not by itself confirm every copy has been erased. Copies held independently by AI providers, Discord, or recipients are subject to their own policies. Contact us for deletion status or information about the relevant backup retention.
Exports & deletion requests
For an official account or personal-data deletion request, email hello@rift-labs.com. Deletion from Rift systems may take up to 30 days from receipt of your deletion request, subject to information we must retain as described below. Account settings also offers the more limited AI-content erasure described here.
Export or delete AI content
Go to Settings → Privacy & data to export stored AI content or request AI-content erasure. Exports contain separate JSON files with content and file metadata; they do not include the underlying media files or every personal-data record. Download files you want to keep from Library before requesting deletion.
Deleting a conversation removes its transcript, attachments, and associated request and moderation copies. Account AI-content erasure disables account access and signs you out, then removes supported chat, Library, generation, editor, and shared agent-history content after active jobs settle. It is irreversible.
Request broader deletion or a complete data copy
Self-service AI-content tools are not full account deletion. For a complete personal-data request, account closure, older campaign records, agent settings, custom skills, support records, or runtime copies, email hello@rift-labs.com. These official channels remain available if you cannot sign in. We may need to verify your identity and clarify the scope of a request to protect your information.
We may retain information where required by law or necessary for legitimate purposes such as tax and accounting obligations, transaction records, resolving disputes, and preventing fraud or repeat abuse. We will explain applicable limitations when responding to your request. Deletion from Rift does not recall material already delivered to other people or independently held by external services.
Cancel subscriptions separately before requesting account-content erasure. Deletion and discontinued use do not cancel billing. Use billing settings or contact us if you cannot access them.
Your privacy rights
Depending on where you live and which laws apply, you may have rights to know about and access personal information, obtain a portable copy, correct inaccuracies, request deletion, restrict processing, withdraw consent, or appeal a privacy-request decision. You may also have rights to opt out of certain sales, sharing, targeted advertising, or profiling where those activities and the relevant law apply.
You may have the right to object to processing based on legitimate interests, and to direct marketing. Contact us to exercise applicable rights. We will consider requests, verify identity or an authorized representative’s authority where needed, and respond within the time required by applicable law. We will not unlawfully discriminate against you for exercising your privacy rights.
If you disagree with our response, reply to request a review or appeal. You may also complain to your local data-protection regulator. The self-service AI-content export is one useful tool; it does not replace your right to request other personal information we hold.
Security & international processing
We use measures designed to protect information, including access controls, protected authentication sessions, private file storage, request validation, and audit records for privileged content access. Access is limited according to account and staff permissions. No website, transmission method, or storage system can guarantee complete security.
Rift and its service providers may process information in countries other than where you live, with different privacy laws. Applicable arrangements depend on the service provider and deployment. Contact us for information about processing locations and any transfer safeguards applicable to your information, including where local law requires them.
Protect your email, Discord account, and connected credentials, use appropriate security features, and sign out of shared devices. If you suspect unauthorized access or a privacy incident, contact hello@rift-labs.com.
Children’s information
Rift provides general-purpose AI tools. Children’s information may require additional protections under applicable law. Do not submit a child’s personal information unless you have the authority and any consent required to do so.
If you believe a child has supplied personal information without appropriate authorization, or you are a parent or guardian requesting access or deletion, contact hello@rift-labs.com so we can investigate and address the request under applicable law.
Changes & contact
We may update this policy as our service or practices change. The date at the top identifies the latest revision. For material changes, we will provide additional notice where required by law and obtain separate consent where required before using information in a new way.
Privacy questions, access or correction requests, deletion requests, and appeals can be sent to: