Privacy Policy

Last updated: 2026-07-03

This Privacy Policy explains how Importify Limited ("Importify", "we", "us") collects, uses, and protects your personal data when you use Riffloop — our Chrome extension and the Riffloop Studio web app at studio.riffloop.app (together, the "Service"). Importify Limited is the data controller for the personal data described here.

Importify Limited · Unit 1603, 16th Floor, The L. Plaza, 367–375 Queen's Road Central, Sheung Wan, Hong Kong · riffloopapp@gmail.com

What we collect

• Account. Email, name, and profile picture from your Google account when you sign in.
• Usage. Records of separations you start (source URL or upload filename, time window, quality, stem) and the resulting outputs.
• Saved sections. Labels, time windows, and stem-mix preferences you save for replay in Studio or the extension.
• Billing. If you upgrade to Pro, PayPro Global (our authorized reseller / merchant of record) handles your payment and card data — we never see card numbers. We keep your PayPro order and subscription IDs, plan, and invoice history.
• Analytics. We use Google Analytics 4 to understand how the Service is used (see "Analytics" below). This is tied to a random, per-install / per-browser identifier and event data (e.g. which features are used, when a usage limit is reached, upgrade and checkout interactions, your plan tier, and the extension version). It does not include your name, email, or the audio or videos you process.
• Uninstall feedback. If you remove the extension and choose to answer the short "Before you go" survey, we collect the reason you select, any optional free-text note you submit, your plan tier, and the anonymous per-install identifier.
• Technical. Standard server logs (IP address, user agent, timestamps), kept for up to 30 days for security and abuse prevention.

What we don't collect

• The Riffloop browser extension separates audio entirely on your device — that audio is never uploaded to our servers.
• We don't send the audio you process, or the specific videos you watch, to our analytics.
• We don't keep uploaded audio files after separation completes — they're deleted within 24 hours.
• We don't keep separated stems indefinitely — cached stems are pruned after 7 days of inactivity.
• We don't sell or rent your personal data, and we don't use it for cross-site advertising.

How we use it

• To run the Service: separate audio, sync your sections, enforce usage limits.
• To bill you (via PayPro Global) if you purchase Pro.
• To understand and improve the Service through aggregate, pseudonymous analytics.
• To prevent abuse (rate limits, Terms enforcement) and keep the Service secure.
• To respond to your support requests.

Analytics (Google Analytics 4)

We use Google Analytics 4, a service provided by Google, to collect pseudonymous usage statistics across the Riffloop website, the Studio web app, and the extension. Analytics events are associated with a random identifier stored on your device (a cookie on our websites, or an identifier in extension storage for the extension) — not with your name or email. On our websites, Google Analytics sets cookies (e.g. _ga, _ga_<id>). We use this data only in aggregate to improve the Service; we do not use Google Analytics for advertising. Google processes this data as described in its own privacy policy.

Cookies & local storage

We use a small number of cookies and similar technologies:

Essential cookies are required for the Service to function. Analytics cookies help us improve it. You can control or delete cookies through your browser settings; blocking essential cookies may prevent sign-in from working.

Third-party services

• Google — sign-in (Google account) and Google Analytics.
• PayPro Global — billing / payment processing (merchant of record).
• Cloudways / DigitalOcean — hosting infrastructure.

Each has its own privacy policy governing the data it processes.

Legal bases for processing (EEA / UK)

Where the EU or UK GDPR applies, we rely on the following legal bases:

• Performance of a contract — to provide the Service and process your purchases (account, usage, saved sections, billing).
• Legitimate interests — to secure the Service, prevent abuse, and improve the product through pseudonymous analytics, balanced against your rights.
• Consent — where required for analytics cookies or similar technologies; you may withdraw consent at any time.
• Legal obligation — to keep billing and tax records.

International data transfers

Importify Limited is based in Hong Kong, and our service providers (including Google, PayPro Global, and DigitalOcean) may process data in various countries, including outside the EEA and the UK. Where personal data is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (or equivalent) offered by those providers.

Data retention

• Uploaded audio: deleted within 24 hours of separation.
• Cached stems: pruned after 7 days of inactivity.
• Server logs: up to 30 days.
• Account, saved sections, usage history: until you delete your account (then removed within 30 days), subject to any records we must retain by law.
• Billing records: retained as required for tax and accounting purposes.

Your rights

Depending on where you live, you have some or all of the following rights over your personal data:

• Access — request a copy of the data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — delete your account and associated data (available in Settings, or by contacting us).
• Restriction & objection — restrict or object to certain processing, including analytics based on legitimate interests.
• Portability — receive your data in a portable format.
• Withdraw consent — where processing is based on consent.

To exercise any of these, email riffloopapp@gmail.com. If you are in the EEA or UK and believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection supervisory authority.

California residents

If you are a California resident, you have the right to know what personal information we collect, to request its deletion or correction, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share your personal information, and we will not discriminate against you for exercising your rights. Submit requests to the email above.

Children

Riffloop is not directed at children. We do not knowingly collect personal data from children under 16 (or the minimum age of digital consent in your country, which may be as low as 13). If you believe a child has provided us data, contact us and we will delete it.

Changes to this policy

We may update this Policy from time to time. We will post the new version with an updated "Last updated" date and, for material changes, notify signed-in users by email.

Contact

Importify Limited — privacy enquiries and data requests: riffloopapp@gmail.com

Unit 1603, 16th Floor, The L. Plaza, 367–375 Queen's Road Central, Sheung Wan, Hong Kong