Privacy Policy

1. Scope and controller

This policy applies to personal data processed by Sexted throughrizza.ai and related services. Rizza determines why and how that data is processed and acts as the controller where applicable law uses that term.

2. Data we collect

• Account and profile data: email address, authentication records, username, age-confirmation timestamp, account tier, and token balance.
• Conversation and media data: messages, prompts, captions, uploaded images, generated images and videos, character choices, and related safety classifications.
• Transaction data: purchases, amounts, currency, and token fulfillment. A payment processor handles full payment-card details; we do not intend to store full card numbers.
• Technical and security data: IP address, device and browser details, timestamps, request logs, authentication events, rate-limit data, errors, and suspected abuse signals.
• Optional analytics: if you consent, product events such as signup, feature use, and media requests. We configure PostHog without autocapture or session replay and load Google Analytics through Google Tag Manager only after consent. We do not send chat text or media content to either analytics service.
• Communications: support, privacy, safety, complaint, and legal correspondence you send us.

3. Sensitive content

Your use of an adult companion service may reveal sexual interests, orientation, relationships, health details, or other sensitive information. Do not submit real names, contact details, financial information, health records, government identifiers, or intimate media of any real person.Rizza is not a confidential professional service and is not end-to-end encrypted.

4. How we use data

We use personal data to:

• provide accounts, conversations, personalization, media generation, and purchases;
• maintain conversation context and reconcile generated media with your account;
• describe and match eligible synthetic output so the same or similar generated media can be delivered to different users when it fits their selected character and context; user-uploaded photos are excluded from this reuse;
• verify adult eligibility and enforce our policies;
• detect CSAM, apparent minors, non-consensual imagery, fraud, and other abuse;
• secure, debug, measure, and improve the Service;
• respond to support, privacy, content-removal, and legal requests; and
• comply with law, preserve evidence, and protect people and the Service.

Where required, our legal bases include performing our contract with you, consent (including optional analytics), legitimate interests in operating and securing the Service, and compliance with legal obligations. We do not use your content to train a Rizza-owned foundation model. AI providers may process content under our arrangements and their applicable service terms.

5. AI and infrastructure providers

The Service sends only the data needed for a requested feature to providers that support it. Current categories and providers include:

• Supabase for authentication and database services;
• Vercel for application hosting and request processing;
• Cloudflare R2 and CDN services for private media storage and delivery;
• OpenRouter and selected model providers for companion text and visual understanding;
• BytePlus for image generation and editing;
• MuleRouter and its model providers for video generation;
• PostHog for opt-in product analytics;
• Google Analytics, loaded through Google Tag Manager, for opt-in traffic analytics; and
• the payment processor identified at checkout when paid purchases are available.

A text prompt, image, or generated asset may therefore be processed outside your country and by more than one provider when a feature is pipelined (for example, image editing followed by image-to-video generation).

6. When data is disclosed

We disclose data to service providers acting for us; when you direct us; to comply with valid legal process; to investigate abuse or protect safety, rights, and security; and in connection with a financing, acquisition, reorganization, or sale of the business. We do not sell personal data for money. We do not currently use third-party advertising cookies or share personal data for cross-context behavioral advertising.

7. Moderation and human review

Automated systems screen certain prompts, uploads, and outputs. Material flagged as potentially illegal or against our policies may be reviewed by authorized personnel or safety providers. We may preserve relevant account, content, and technical records and disclose them when legally required.

8. Retention

Chats and media are not ephemeral: they may remain associated with your account while it is active. We retain information for as long as reasonably needed to provide the Service, complete transactions, meet the purposes above, resolve disputes, enforce agreements, and comply with law. After a verified deletion request, we delete or de-identify data unless retention is needed for security, fraud prevention, legal compliance, backups, or the establishment or defense of claims. Provider backup and deletion cycles may take additional time.

9. Your choices and rights

Depending on where you live, you may request access, correction, deletion, portability, restriction, or an objection to processing; withdraw consent; opt out of a sale, sharing, or targeted advertising if any begins; and appeal a denied request. You may also lodge a complaint with your data protection authority. We will not discriminate against you for exercising a privacy right.

Send requests to privacy@sexted.ai from the email associated with your account. We may verify your identity and an authorized agent’s authority before acting. Cookie choices can be changed through “Cookie preferences” in the app profile.

10. Adults only

The Service is not directed to anyone under 18, and we do not knowingly collect personal data from minors. If you believe a minor has accessed the Service or appears in any Input or output, contact us immediately through the Safety page. We will investigate and delete data where required.

11. Security and international transfers

We use administrative and technical safeguards designed to protect data, including access controls and encryption in transit. No system is perfectly secure, so avoid submitting information you do not want processed. Providers may process data in the United States, European Union, Singapore, and other locations. Where required, transfers use recognized legal safeguards.

12. Changes and contact

We may update this policy as the Service or law changes. We will post the updated policy and effective date and provide additional notice when required. Questions and privacy requests may be sent to privacy@sexted.ai.