Privacy Policy

Last updated: December 2, 2024

1. Introduction

Riibon ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our marketing analytics platform at app.riibon.com (the "Service").

Please read this privacy policy carefully. By using the Service, you consent to the practices described in this policy.

2. Information We Collect

Account Information

When you create an account, we collect:

  • Email address
  • Password (stored securely using industry-standard encryption)

Data from Facebook/Meta

When you connect your Meta (Facebook) account, we access:

  • Advertising data (ads_read): Campaign performance metrics including impressions, clicks, spend, conversions, and other advertising analytics
  • Business information (business_management): Business account details and ad account associations
  • Page information (pages_read_engagement, pages_show_list): Basic page details such as follower count, fan count, and page category to provide context for advertising analytics

Usage Information

We automatically collect:

  • Log data (browser type, access times, pages viewed)
  • Device information
  • Interactions with our AI assistant (chat history within sessions)

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Display your advertising performance data on dashboards
  • Power our AI assistant (Riibon) to provide insights and answer questions about your marketing data
  • Send service-related communications
  • Detect and prevent fraud or abuse
  • Comply with legal obligations

4. Facebook/Meta Data Usage

We take special care with data obtained through Facebook/Meta APIs:

What We Access

  • ads_read: Read-only access to advertising campaign data for analytics display
  • business_management: Access to business account structure for proper data organization
  • pages_read_engagement: Page metrics to provide context for advertising performance
  • pages_show_list: List of pages you manage for account selection

How We Use It

  • Display aggregated advertising metrics on your dashboard
  • Provide AI-powered insights through our chat assistant
  • Enable comparison and trend analysis of your campaigns

What We Do NOT Do

  • We do NOT sell your Facebook/Meta data to third parties
  • We do NOT use your data for advertising purposes
  • We do NOT share your data with other users
  • We do NOT retain data longer than necessary for the Service

5. Data Storage and Security

We implement appropriate technical and organizational measures to protect your data:

  • Data is stored on secure cloud infrastructure (Neon Postgres on AWS)
  • All data is encrypted in transit using TLS/SSL
  • Access tokens are encrypted at rest
  • We use row-level isolation to ensure data separation between users
  • Regular security audits and monitoring

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Specifically:

  • Account information is retained until you delete your account
  • Marketing data cache is retained for up to 30 days to improve performance
  • Chat history is retained for the duration of your subscription
  • Upon account deletion, all your data is permanently removed within 30 days

7. Data Sharing

We do not sell your personal information. We may share data with:

  • Service providers: Third-party services that help us operate the Service:
    • Neon (database)
    • Anthropic (AI processing for chat assistant)
    • Stripe (payment processing)
  • Legal requirements: When required by law or to protect our rights
  • Business transfers: In connection with a merger or acquisition

8. Your Rights

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your account and data
  • Disconnection: Disconnect your Meta account at any time through our settings
  • Portability: Request your data in a portable format

To exercise these rights, please contact us at [email protected].

9. Cookies and Tracking

We use essential cookies for:

  • Authentication and session management
  • Security and fraud prevention
  • Remembering your preferences

Our marketing website (www.riibon.com) also uses the following analytics and advertising cookies:

  • Google Analytics (GA4): sets _ga and _gid cookies to measure site usage.
  • Google Ads: sets a _gcl_aw cookie to match ad clicks to conversions.
  • Meta Pixel: sets _fbp and _fbc cookies to measure and improve the performance of our Meta (Facebook/Instagram) advertising.
  • Microsoft Clarity: records anonymised session behaviour (clicks, scrolling) to help us understand how visitors use the site.

These cookies are used for advertising and analytics purposes as described above; they are not used to sell your data or to advertise to you on behalf of third parties.

10. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: [email protected]