Back to Home

Privacy Policy

Effective Date: February 25, 2026

Table of Contents

1. Introduction

Ribbi, operated by Somasole Inc. ("we," "our," or "us"), is an AI-powered creative platform that helps users generate images, videos, audio, and written content through natural language conversations. This Privacy Policy describes how we process personal information when you use our website (ribbi.ai), applications, and related services (collectively, the "Service").

By accessing or using Ribbi, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our services.

Important: You should not provide us with any confidential, sensitive, unlicensed proprietary, or biometric information through the Service.

2. Information We Collect

2.1 Account Information

When you create an account using Google OAuth authentication, we collect:

  • Email address
  • Display name
  • Profile picture URL
  • Google account identifier

This information obtained from Google is used solely for authenticating your identity, creating and managing your account, and providing you with access to the Service. We do not use Google user data for advertising, marketing, or any purpose unrelated to providing or improving the core functionality of Ribbi.

2.2 User-Generated Content

We collect and store content you create or provide through our service:

  • Prompts and Inputs: Text prompts, commands, descriptions, and messages you provide to our AI systems
  • Generated Outputs: Images, videos, audio, and text content generated by our AI based on your inputs
  • Uploaded Media: Photos, images, videos, and audio files you upload for processing
  • Skills/Templates: Custom prompts and workflow templates you create
  • Conversation History: Your chat history with AI assistants
  • Preferences: Settings, configurations, and personalization choices

2.3 Technical Information

We automatically collect certain technical data:

  • Device type, operating system, and browser information
  • IP address and approximate geographic location
  • Usage patterns, feature interactions, and session duration
  • Error logs and performance metrics
  • Referral URLs and navigation paths

2.4 Social Media Integration Data

When you connect social media accounts (YouTube, TikTok, Instagram, Twitter/X) for content publishing:

  • Account identifiers and profile information
  • OAuth access tokens (stored securely and encrypted)
  • Publishing metadata and content interaction data
  • Channel/profile statistics (where authorized)

2.5 Payment Information

If you make purchases, our third-party payment processor (Stripe) collects payment card information. We do not directly store your full payment card details.

3. How We Use Your Information

We process your personal data for the following purposes:

  • Service Delivery: To provide, maintain, and operate our AI creative tools
  • Content Generation: To process your inputs and generate requested outputs (images, videos, audio, text)
  • Authentication: To verify your identity and manage your account
  • Personalization: To customize your experience and provide relevant suggestions
  • Social Publishing: To post content to your connected social media accounts on your behalf
  • Scheduled Tasks: To execute automated publishing at your specified times
  • Long-term Memory: To remember context and preferences across conversations (if enabled)
  • Communication: To respond to inquiries and provide customer support
  • Analytics: To understand usage patterns and improve our services
  • Security: To detect, prevent, and address fraud, abuse, and technical issues
  • Legal Compliance: To comply with applicable laws and regulations

Google User Data: Notwithstanding the above, data obtained through Google OAuth (your email address, display name, profile picture, and Google account identifier) is used exclusively for providing and improving user-facing features of Ribbi — specifically, account authentication, profile display, and service access. Google user data is not used for analytics, advertising, marketing, or any other purpose unrelated to the core functionality of the Service.

4. AI Training and Your Content

We Do Not Use Your Content to Train AI Models: Your inputs (prompts, uploaded media) and outputs (generated content) are NOT used to train, develop, or improve our AI models or any third-party AI models.

Your content is used solely to:

  • Provide the Service and generate your requested outputs
  • Store your conversation history and assets for your continued access
  • Improve service quality through aggregated, anonymized analytics (not content itself)

Third-party AI providers we use (such as OpenAI, Anthropic, Google) process your inputs to generate outputs, but we have agreements in place that prohibit them from using your data for training purposes.

xAI (Grok) Data Isolation: xAI's public terms of service indicate they may use content sent to their API to train their general AI models. To protect your data, we implement strict data segregation: Google User Data (information obtained through Google OAuth, including your email address, display name, profile picture, and Google account identifier) is never transmitted to xAI's API. When you use Grok-powered features, only user-provided conversation content — which is independent of any Google API data — is sent to xAI for processing. This architecture ensures full compliance with the Google API Services User Data Policy, including the Limited Use requirements.

5. Data Storage and Security

We implement industry-standard security measures to protect your data:

  • Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
  • Infrastructure: We use Cloudflare Workers and enterprise-grade PostgreSQL databases
  • Access Controls: Strict authentication and authorization protocols limit data access
  • Regular Audits: We conduct periodic security assessments and vulnerability testing
  • Secure Storage: Media assets are stored in encrypted R2 object storage
Security Disclaimer: While we employ robust security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

6. Third-Party Services

Our service integrates with the following third-party providers:

6.1 Authentication

Ribbi's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we limit our use of Google user data as follows:

  • Google user data is used only to provide or improve user-facing features that are prominent in Ribbi's user interface (account authentication, profile display, and service access)
  • We do not transfer Google user data to third parties except as necessary to provide or improve user-facing features, as required by law, or as part of a merger/acquisition with prior user consent
  • Google user data is never transmitted to third-party AI model providers — including but not limited to xAI (Grok), OpenAI, Anthropic, or any other AI service. Our backend architecture enforces complete data segregation between Google authentication data and AI processing pipelines
  • We do not use Google user data for serving advertisements
  • We do not allow humans to read Google user data unless we have your affirmative consent, it is necessary for security purposes, to comply with applicable law, or for our internal operations (and the data is aggregated and anonymized)

6.2 AI Model Providers

We use multiple AI service providers to power our generation features:

  • OpenAI: GPT models, Sora video generation
  • Anthropic: Claude language models
  • Google: Gemini models, text-to-speech
  • xAI: Grok models (subject to data isolation — see below)
  • Midjourney: Image generation
  • Kling: Video generation
  • MiniMax: Audio and music generation
  • ByteDance: Seedream, Seedance models
  • Alibaba Cloud: Wan models, image segmentation

Your user-provided conversation content is transmitted to these providers to generate outputs. Each provider has their own privacy practices.

Data Isolation for xAI (Grok): Because xAI's terms of service may permit the use of submitted content for AI model training, we enforce strict data segregation for this provider. Google User Data (email, name, profile picture, Google account identifier) obtained through Google OAuth is never included in any request to xAI's API. Only user-provided conversation content — independent of any data obtained from Google APIs — is transmitted to xAI for the purpose of generating responses. This ensures compliance with the Google API Services User Data Policy Limited Use requirements.

6.3 YouTube API Services

Our YouTube integration uses YouTube API Services. By connecting your YouTube account, you agree to the YouTube Terms of Service.

Data we access:

  • Channel information (name, ID, profile picture)
  • Upload capability for videos you create through Ribbi
  • Video metadata management (title, description, tags, privacy settings)

Data handling:

  • Access tokens are stored securely with encryption
  • Video content is uploaded directly to YouTube, not permanently stored on our servers
  • We do not share your YouTube data with third parties or use it for advertising

You may revoke access at any time via Google Security Settings or your Ribbi account settings.

6.4 TikTok Integration

When you connect your TikTok account:

  • We access your creator information and posting permissions
  • Videos are uploaded directly to TikTok's servers
  • We store access tokens securely and refresh them as needed

By using TikTok integration, you agree to TikTok's Terms of Service.

6.5 Twitter/X Integration

When you connect your Twitter/X account, we can post tweets and media on your behalf. We store OAuth tokens securely and do not access your direct messages.

6.6 Other Services

7. How We Share Information

We may share your information in the following circumstances:

  • Service Providers: With vendors who help us operate the Service (hosting, analytics, payment processing)
  • AI Providers: Your inputs are transmitted to AI model providers to generate outputs
  • Social Media Platforms: When you publish content to connected accounts
  • Legal Requirements: When required by law, legal process, or government request
  • Protection: To protect our rights, privacy, safety, or property
  • Business Transfers: In connection with mergers, acquisitions, or asset sales
  • With Your Consent: When you direct us to share information

We do not sell your personal information to third parties.

Google User Data: Information received from Google APIs is never sold, used for advertising, or shared with third parties except as strictly necessary to provide the Service (e.g., displaying your profile) or as required by law. Critically, Google user data is never transmitted to any third-party AI model provider, including xAI (Grok), OpenAI, Anthropic, or any other AI service used by Ribbi. Our backend architecture enforces complete separation between Google authentication data and AI processing pipelines. Our handling of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate information
  • Deletion: Request deletion of your account and associated data
  • Portability: Export your conversation history and created content
  • Objection: Object to certain processing activities
  • Withdrawal: Withdraw consent for optional data processing
  • Disconnect Integrations: Revoke access to connected social media accounts at any time
  • Disable Memory: Turn off long-term memory features in your account settings

To exercise these rights, please contact us at contact@somasole.ai.

9. Data Retention

We retain your personal data for as long as your account remains active or as necessary to provide our services.

9.1 Permanently Retained (Until You Delete)

  • Account Data: Your profile information is retained until you delete your account
  • Generated Images and Videos: All AI-generated images and videos you create are permanently stored and remain accessible until you manually delete them
  • Uploaded Media: Files you upload are retained until you delete them
  • Conversation History: Your chat history is retained until you delete specific conversations or your account
  • Skills/Templates: Custom prompts you create are retained until you delete them

9.2 Temporary Data

  • Technical Logs: Server logs and error reports are retained for up to 90 days for debugging and security purposes
  • Analytics Data: Aggregated, anonymized usage statistics

9.3 Legal Requirements

  • Payment Records: Retained as required by tax and accounting laws (typically 7 years)

9.4 Account Deletion

When you delete your account, all your data (including generated images, videos, conversations, and personal information) is permanently deleted from our active systems within 30 days. Backup copies may be retained for up to 90 days before complete removal.

10. Cookies and Tracking Technologies

We use cookies and similar technologies for:

  • Essential Cookies: Required for authentication and core functionality
  • Preference Cookies: To remember your settings and language preferences
  • Analytics Cookies: To understand how you use our Service

You can control cookies through your browser settings. Disabling essential cookies may affect Service functionality.

11. International Data Transfers

We are headquartered in the United States. Your data may be processed in countries where our service providers operate, including the US, EU, and other locations. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where required.

12. Children's Privacy

Ribbi is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately at contact@somasole.ai.

13. Notice to European Users

If you are located in the European Economic Area (EEA) or United Kingdom:

13.1 Legal Basis for Processing

We process your data based on:

  • Contract Performance: To deliver the Service you requested
  • Legitimate Interests: To improve our services and ensure security
  • Consent: For optional features like marketing communications
  • Legal Obligation: To comply with applicable laws

13.2 Your GDPR Rights

Under GDPR, you have rights to access, rectify, erase, restrict, port, and object to processing of your data. To exercise these rights, contact contact@somasole.ai.

13.3 Complaints

You have the right to lodge a complaint with your local data protection authority if you believe we have violated your rights.

14. Updates to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

  • Posting a notice on our website
  • Updating the "Effective Date" at the top of this policy
  • Sending email notification for significant changes (where appropriate)

Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:

Somasole Inc.

Email: contact@somasole.ai

We aim to respond to all inquiries within 30 business days.

Terms of Service | Back to Home

© 2026 Ribbi by Somasole Inc. All rights reserved.