Privacy Policy

1. Who We Are

R2P ("R2P", "we", "us") is operated by Rhizomatic Artificial Intelligence Private Limited, a company registered in Pune, Maharashtra, India ("Company"). This Privacy Policy explains what information we collect through the R2P platform, why we collect it, who we share it with, and the choices you have.

2. Information We Collect

We collect information in three ways:

• Account information — name, email address, and a hashed password if you sign up with email, or your Google profile (name, email, avatar) if you sign in with Google OAuth.
• Content and connection data — brand settings, property (website) URLs, WordPress connection credentials, and the OAuth tokens you grant us for Meta (Facebook/Instagram) and LinkedIn so we can publish on your behalf.
• Usage and billing data — credit balances and transaction history, subscription/plan details, and generated content (research notes, drafts, images, reels, carousels) created through the platform.

3. How We Use Information

• To operate your account, authenticate you, and maintain your session.
• To generate content on your behalf using AI providers, and to render images, carousels, and reels.
• To authorize and execute publishing actions to your connected WordPress sites and social accounts.
• To allocate plan credits, process payments, and manage your billing state.
• To contact you about account activity, support requests, and billing changes.

4. Third-Party Service Providers

We do not sell your personal data. We share data only with the following categories of processors, strictly to operate the platform:

• Paddle — processes subscription and credit-pack payments as our merchant of record. Paddle receives billing details necessary to complete your purchase.
• Amazon Web Services (SES) — sends transactional email (account, billing, and support notifications) on our behalf.
• AI content and media providers (including OpenRouter and Replicate) — process the prompts and brand inputs you provide to generate drafts, images, and video content. We do not send them your account credentials.
• WordPress, Meta (Facebook/Instagram), and LinkedIn — receive only the content and metadata needed to publish the posts you request, using the connection credentials or OAuth tokens you provide. Access is scoped to the operations you initiate.

Image and video rendering for carousels and reels happens on our own servers and is not shared with an external rendering provider.

5. Cookies and Session Data

We use a single essential session cookie to keep you signed in and to protect your account. We do not currently use any third-party analytics, advertising, or tracking cookies.

6. Data Retention and Deletion

We retain account and content data for as long as your account is active. If you close your account, we delete or anonymize personal information within a reasonable period, except where we must retain records to comply with tax, accounting, or legal obligations. You can request deletion at any time by contacting [email protected].

7. Your Rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, or to object to certain processing. To exercise any of these rights, email [email protected] and we will respond within a reasonable timeframe.

8. International Data Transfers

R2P is operated from India, and the third-party providers listed above may process data in other countries (including the United States). Where data is transferred internationally, we rely on the applicable safeguards required by those providers' own data protection frameworks.

9. Children’s Privacy

R2P is intended for business use and is not directed at children. We do not knowingly collect personal information from anyone under the age of 18.

10. Security

We use industry-standard safeguards, including HTTPS in transit, hashed passwords, same-origin validation, and strict parameter checking. No storage or transmission method is 100% secure, and we cannot guarantee absolute security.

11. Governing Law

This Privacy Policy is governed by the laws of India. Rhizomatic Artificial Intelligence Private Limited is headquartered in Pune, Maharashtra, India.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last Updated" date above when we do, and material changes will be communicated via email or an in-product notice.