Privacy Policy

1. Who we are

Rifair AI ("Rifair", "we", "us", "our") is an AI-powered hiring intelligence platform that helps organisations detect and eliminate bias from interview questions, job descriptions, and hiring processes. Our platform is operated by the Rifair AI team.

This Privacy Policy explains how we collect, use, store, and share information about you when you use our website at rifair.ai and our associated services (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Information we collect

Information you provide directly

• Account information: Your name, email address, and password when you create an account.
• Payment information: Billing details processed securely through Razorpay. We do not store your full card number — Razorpay handles payment data under their own privacy policy.
• Content you submit: Interview questions, job descriptions, candidate evaluation notes, and any other text you paste or type into our analysis tools.
• Profile information: Company name, role, and preferences you optionally provide.

Information collected automatically

• Usage data: Pages visited, features used, buttons clicked, time spent on each feature, and interaction patterns.
• Device information: Browser type, operating system, screen resolution, and device type.
• Log data: IP address, request timestamps, error logs, and performance data.
• Session data: Session identifiers and navigation patterns within the platform.

Information from third parties

• Authentication providers: If you sign in via Google or other OAuth providers, we receive basic profile information they share with us.
• Payment processors: Razorpay shares transaction status and basic billing information with us.

3. How we use your information

To provide the Service

• Analyse interview questions and job descriptions for bias
• Generate structured interview kits and evaluation reports
• Store your analysis history and results
• Process payments and manage your subscription
• Send transactional emails (welcome, receipts, limit warnings)

To improve the Service

• Understand how features are used to prioritise improvements
• Identify and fix bugs and performance issues
• Build aggregate, anonymised insights about bias patterns in hiring
• Train and improve our personalisation algorithms

To communicate with you

• Send product updates and new feature announcements
• Notify you of usage limits and subscription changes
• Respond to support requests
• Send retention reminders if you have unused analyses or kits

We will never send you unsolicited marketing emails without your consent. You can unsubscribe from non-transactional emails at any time.

4. AI processing and your data

Rifair AI uses the following AI model providers to process your submitted content:

• Groq: Primary AI inference provider (Llama models)
• Google Gemini: Secondary AI provider
• Anthropic Claude: Fallback AI provider

Content submitted to these providers is governed by their respective privacy policies and terms of service. We use these providers in API mode, which generally means your data is not used to train their public models — however, you should review each provider's current data usage policies.

We cache analysis results in our own database (Supabase) to power your history feature and reduce repeat API costs. Cached results are associated with your account and subject to your data deletion rights.

What we do not do with your AI-processed content

• We do not sell your interview questions or job descriptions to any third party
• We do not use your specific submitted content to train our own AI models without your explicit consent
• We do not share your individual analysis results with other users

5. How we share your information

We do not sell, rent, or trade your personal information. We share data only in the following circumstances:

Service providers

We share data with trusted third-party vendors who help us operate the Service:

• Supabase: Database and authentication infrastructure
• Vercel: Hosting and deployment
• Razorpay: Payment processing
• Resend: Transactional email delivery
• Groq / Google / Anthropic: AI model inference

Legal requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect our rights, your safety, or the safety of others.

Business transfers

If Rifair AI is acquired, merged, or its assets are transferred, your information may be transferred as part of that transaction. We will notify you via email before your information becomes subject to a different privacy policy.

6. Data retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account data: Retained until you delete your account
• Analysis history: Retained for 12 months on Free plan, 24 months on Starter, indefinitely on Growth
• Payment records: Retained for 7 years as required by Indian financial regulations
• Usage event logs: Retained for 90 days for analytics purposes
• Email logs: Retained for 30 days

When you delete your account, we delete or anonymise all personal data within 30 days, except where retention is required by law.

7. Security

We implement industry-standard security measures to protect your information:

• All data transmitted over HTTPS with TLS encryption
• Database access controlled by Row Level Security (RLS) policies
• Passwords hashed using bcrypt — we never store plain text passwords
• API keys and secrets stored in environment variables, never in code
• Regular security reviews of our infrastructure

No method of transmission or storage is 100% secure. If you discover a security reporting, please report it to support@rifairai.com and we will respond within 48 hours.

8. Your rights

You have the following rights regarding your personal data:

• Access: Request a copy of all personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and associated data
• Portability: Request your data in a machine-readable format (JSON)
• Opt-out: Unsubscribe from non-transactional communications at any time
• Restriction: Request that we restrict processing of your data in certain circumstances

To exercise any of these rights, email us at support@rifairai.com. We will respond within 30 days. For account deletion, you can also use the "Delete Account" option in your Settings page.

9. Cookies

We use cookies and similar tracking technologies to operate and improve the Service:

• Essential cookies: Required for authentication and session management. Cannot be disabled.
• Analytics cookies: Help us understand how the Service is used. You can opt out via your browser settings.
• Preference cookies: Remember your settings and preferences.

We do not use advertising cookies or sell cookie data to advertisers.

10. Children's privacy

Rifair AI is a professional B2B service intended for use by individuals aged 18 and over. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us at support@rifairai.com and we will delete it promptly.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the "Last updated" date at the top of this page. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

12. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: