Last Updated: November 9, 2026

1. Overview

Welcome to Ricefall (“we,” “our,” or “us”). We operate the website and related services at https://ricefall.com (collectively, the “Services”). We respect user privacy and are committed to handling personal data responsibly.

This Privacy Policy explains the collection, handling, and protection of information across our Services.

2. Information We Collect

We collect information strictly necessary to provide and operate the Services:

  • Server and Connection Logs: Standard technical records (such as IP address, browser type, device information, referring pages, and access timestamps) automatically recorded to ensure infrastructure stability and security.
  • Authentication Details: Basic profile information authorized by you when signing in through external identity providers, limited to unique account identifiers, display names, and email addresses.
  • Communications: Contact information and message content sent when you reach out for technical support or inquiries.

3. Use of Information

Collected data is used solely to:

  • Authenticate user identity and maintain active sessions.
  • Deliver, maintain, and optimize platform features.
  • Respond to direct communications and support requests.
  • Prevent unauthorized access, security incidents, and service disruptions.

We do not sell, rent, or lease personal data. We do not use user information for cross-context behavioral advertising, profiling, or data brokerage.

4. Data Sharing and Disclosure

We disclose information only under specific, limited circumstances:

  • Hosting and Infrastructure Partners: Trusted technical service providers assisting in service operations, bound by confidentiality and data protection obligations.
  • Legal Requirements: When required by enforceable laws, valid court orders, or official governmental requests.

5. External APIs and Data Protection

When external APIs or authentication protocols are utilized to deliver user-requested features:

  • The transfer and processing of information received from external platform APIs will adhere to the governing developer policies, including the Google API Services User Data Policy and its Limited Use requirements where applicable.
  • Information retrieved through external integrations is used solely to support user-facing functionality and is never transferred for marketing or unauthorized third-party analysis.

6. Security Standards

We apply industry-standard technical safeguards to protect stored data:

  • Network communications between client browsers and our servers are encrypted in transit using TLS/HTTPS.
  • System access is strictly restricted to authorized operational staff.

7. Data Retention and Deletion Rights

  • Retention: Data is kept only for the duration required to fulfill operational purposes, unless extended retention is mandated by law.
  • Revocation of Access: Access permissions granted to external authentication providers may be revoked at any time through the respective platform’s account security controls.
  • Deletion Requests: You may request the permanent removal of your stored account records at any time by contacting [email protected]. Validated requests will be completed within 30 days.

8. Contact Us

For questions or privacy-related inquiries regarding this policy, please contact: