If you are a user outside the Chinese mainland, you must also comply with the laws of your country or region of residence when entering into or performing this agreement.
This Privacy Policy explains how we collect and use your personal data when you use our website, applications, and services (collectively referred to as the "Services").
Our use of this data is governed by applicable customer agreements, which specify the rules for accessing and using the relevant products.
1. Personal Data We Collect
We collect the following personal data ("Personal Data") related to you:
Personal data you provide: We collect personal data when you create an account to use our services or communicate with us, as follows:
Account Information: When you create an account, we collect information related to your account, including your name, contact details, account credentials, date of birth, payment information, and transaction history (collectively referred to as "Account Information"). Some of our services also allow you to upload a personal photo, username, or other information as part of your Account Information.
User Content: We collect personal data you provide when entering content into our services ("Content"), including your prompts and other uploaded materials such as files, images, audio, videos, Sora characters, and data from related services, depending on the features you use. Some of our services allow you to interact with other users by posting, commenting, or sending messages, and we also consider these interactions part of the Content.
Communication Information: When you contact us via email or our social media page, we may collect your personal data, such as name, contact information, and message content ("Communication Information").
Contact Data: If you choose to link device contacts, we will upload information from your device's contact list and verify which contacts are also using our service. If a contact has not yet used our service, we will notify you when they register. You can learn more about how to link contacts and how we use the contact information you upload for users of services other than ours.
Other information you provide: We may collect additional information you provide to us, such as details you supply when participating in our events or surveys, or information you provide to us or to suppliers operating on our behalf for identity or age verification (collectively referred to as "other information you provide").
Personal data we collect from your use of our services: When you access, use, or interact with our services, we receive the following information about your activities:
Log Data: We collect information automatically sent by your browser or device when using our services. Log data includes your Internet Protocol (IP) address, browser type and settings, request date and time, and how you interact with our services.
Data Usage: We collect information about your interactions with our services, including the types of content you view or engage with, features and actions you use, when you submit model responses, users you interact with, your time zone, country/region, access date and time, user agent and version, device type (computer or mobile), and network connection details.
Device Information: We collect information related to the device you use to access our services, such as device name, operating system, device identifier, and browser. The collected information depends on your device type and settings.
Location Information: We use your device's IP address and other data to determine its approximate location when accessing our services, enhancing security and optimizing your experience—for example, by detecting unauthorized logins to protect your account or providing more accurate responses. Additionally, some of our services allow you to select more precise location data from your device, such as information provided by its GPS.
Cookies and Similar Technologies: We use cookies and similar technologies to operate and manage our services and enhance your experience. Cookies store certain information described in this policy, such as helping maintain your preferences across sessions when you are not logged in, or for authentication and customer support.
Information we receive from other sources: We obtain information from various sources, including trusted security and protection partners to ensure safety and prevent fraud, abuse, and other threats to our services, as well as from marketing suppliers regarding potential customers of our enterprise services.
We will also gather information from other sources (such as publicly available data on the internet) to develop the models that power our services.
2. How We Use Personal Data
We will use personal data for the following purposes:
Used to provide, analyze, and maintain our services;
For improving and developing our services, as well as conducting research, such as developing new features;
Used to personalize and tailor your experience across our services, such as providing more relevant content.
Used to communicate with you, including answering your questions and sending you information about our services and events, such as service changes or improvements.
Based on your preferences and control settings, we promote our products and services to you through direct marketing and third-party platforms, and evaluate the effectiveness of these promotional activities.
When you select to connect with a contact, this feature identifies the contact who is using our service and notifies you when they join our service later.
Prevent fraud, illegal activities, or service abuse to ensure the security of our systems and services, including monitoring all content submitted or interacted with on our platform (see here for details).
To fulfill legal obligations and protect the rights, privacy, security, or property of our users, Ribbi AI, or third parties—such as preventing harm to you or others, or estimating your age to provide age-appropriate content.
We will also aggregate or de-identify personal data to prevent it from identifying you, and use such information for the aforementioned purposes—such as analyzing service usage, improving and adding features, and conducting research. We will store and utilize this information in a de-identified format and will not attempt to re-identify it unless required by law.
As mentioned above, we may use the content you provide to improve our services. Read our guidelines to learn how to opt out of having your content used to train our models.
3. Disclosure of Personal Data
We will disclose your personal data in the following circumstances:
Suppliers, Service Providers, and Marketing Partners: To assist us in meeting operational needs and delivering specific services and functions, we disclose personal data to suppliers, service providers, and marketing partners. These partners include hosting service providers, customer service providers, cloud service providers, content distribution service providers, support and security service providers, email communication software providers, web analytics service providers, payment and transaction processors, search and shopping service providers, as well as information technology providers. We also collaborate with service providers that assist us with age and identity verification. When working with these service providers, they access, process, or store personal data solely as instructed by us and exclusively within the course of performing their duties. Additionally, we share limited information with non-service providers marketing partners to promote our products and services on third-party platforms and help evaluate the effectiveness of such promotional activities. Some of these partners may collect relevant information through cookies and similar technologies.
Business Transactions: If we participate in strategic transactions, restructurings, bankruptcies, takeovers, or service transfers to other providers (collectively referred to as "transactions"), your personal data may be disclosed to the transaction counterparties and other parties assisting the transaction during due diligence, and transferred together with other assets to the successor or affiliated companies as part of the transaction.
Government authorities or other third parties: To comply with applicable legal requirements, we may share your personal data (including information about your interactions with our services) with government authorities, industry peers, or other third parties under the following circumstances: (i) when required by law or when such disclosure is deemed necessary for fulfilling legal obligations in good faith; (ii) to protect and safeguard our rights or property; (iii) when we determine that there is a violation of our terms, policies, or legal provisions; (iv) to detect or prevent fraud or other illegal activities; (v) to protect the safety, security, and integrity of our products, employees, users, or the public; (vi) to avoid legal liability.
Affiliated Companies: We will disclose personal data to our affiliated companies. Affiliated companies are entities that control Rabbit AI, are controlled by Rabbit AI, or are under joint control with Rabbit AI. Our affiliated companies may use such personal data in compliance with this policy.
Parents or guardians of teenage users: Teenage users and their parents or guardians can link their accounts to allow parents or guardians to manage certain settings and receive alerts when we detect serious security issues. These accounts can be unlinked at any time.
Other users and third parties with whom you interact or share information: Certain services allow you to interact with or share information with other users or third parties. For example, you may share information with third-party search and shopping partners. Information shared with these partners is subject to their respective terms and privacy policies; before sharing information with them, you should ensure you understand these terms and policies.
We may also aggregate or de-identify personal data to prevent it from identifying you, and share it with third parties for the aforementioned purposes (e.g., to improve our services).
4. Data Retention
We will retain your personal data only for the duration necessary to provide our services or for other legitimate business purposes (such as resolving disputes, for security and safety reasons, or to fulfill legal obligations). The retention period depends on the type of data, how we use it, and in many cases on your settings.
Information retained until deletion: Some of our services allow you to delete personal data stored in your account. For example, you can delete partial or all conversation records, specific saved memories, or log out of your account. Upon your request to delete personal data, we will remove it from the system within 30 days, unless: we need to extend the retention period as specified below; or you permit us to use your data to optimize our models, provided the data has been de-identified and no longer associated with your account.
Information we automatically delete: In certain cases, personal data may be automatically deleted. For example, temporary chats are automatically deleted after 30 days (except in cases where retention is required for security or legal reasons as specified below).
Information requiring longer retention due to legitimate security, legal or regulatory requirements: In certain cases, we may need to retain personal data for an extended period even after its deletion, such as when required by law, to prevent fraud and abuse, for security reasons, or for financial record-keeping purposes. Examples include:
If specific content or your account is blocked for violating our terms of use, we may retain the relevant data to protect our services from fraud, abuse, or other violations of our policies.
If we are legally required to retain your data (e.g., upon receiving a lawful subpoena), we may retain such data for the duration specified by applicable legal or regulatory requirements.
When engaging in financial transactions, we may retain information related to payments and transactions to fulfill our accounting, dispute resolution, and compliance obligations.
When you request us to delete your personal data, we will retain an audit record of the deletion request to verify that we have fulfilled it.
When determining these retention periods, we consider multiple factors, such as:
The purposes for which we process personal data (e.g., whether such data needs to be retained to provide our services);
The quantity, nature, and sensitivity of the information;
The potential hazards associated with unauthorized use or disclosure;
Any legal provisions that we must comply with.
5. Data Control
Our service provides multiple data control options to manage how personal data is used and retained. You can modify these settings at any time in your account. The specific control options include:
You can choose whether to allow your content to be used for optimizing and training our models.
You can choose whether we remember relevant details across different chats to make the content more personalized and tailored to your needs.
You can export your history and related data in the account's Data Control Settings.
You can delete or archive chat records, or choose to permanently delete your account.
Under applicable laws, when using our services, you may choose which cookies to use and decide whether we use your information to promote our products and services on third-party platforms.
If you use the Atlas browser, you can delete your browsing history or choose to browse in incognito mode to prevent others on shared devices from viewing your browsing activity.
You can unsubscribe from the marketing messages we send you using the options provided in the relevant communication.
6. Your Rights
Depending on your location, you may have certain statutory rights regarding your personal data. For example, you may have the following rights:
Access your personal data and information related to how it is processed.
Correct or update your personal data
Delete your personal data from our records.
Limit how we process your personal data.
Transfer your personal data to a third party (data portability).
You may withdraw your consent when we use it as the legal basis for processing.
Submit a complaint to the data protection authority in your region.
Ribbi AI processes your personal data on servers located in multiple jurisdictions for the purposes outlined in this Policy, including at our facilities and servers in the United States, as well as at those of our affiliated entities, partners, suppliers, and service providers in various countries or regions. Although data protection laws vary across jurisdictions, we will safeguard your personal data wherever it is processed in accordance with the protective measures specified herein, and transfer data solely through legally valid mechanisms.
7. Children
Our services are not intended for or applicable to children under the age of 13. We do not collect personal data from individuals known to be under 13 years old. If you have reasonable grounds to believe that a child under 13 has provided personal data to Rabbit AI through our services, please email us at [contact@somasole.ai]. We will investigate such reports and remove the relevant personal data from our systems when appropriate. Users under 18 years of age must obtain permission from their parents or legal guardians to use our services.
8. Safety
We implement commercially reasonable technical, managerial, and organizational measures to protect personal data from loss, misuse, unauthorized access, disclosure, alteration, or destruction. However, no internet or email transmission can be absolutely secure or entirely error-free. Therefore, you should exercise particular caution when determining which information you provide to our services. Furthermore, we assume no liability for any attempts to circumvent privacy settings or security measures implemented in our services or third-party websites.
9. Changes to Privacy Policy
We may update this policy from time to time. Each update will be published on this page with the new version and effective date, unless applicable laws require a different notification method.
11. How to Contact Us
If you have any questions or concerns not covered by this policy, please contact the support team [contact@somasole.ai].