Privacy Policy

Introduction

Soulriddle is a community platform where users can discover, share, and use AI prompts, with content focused on divination, metaphysics, self-reflection, and creative themes. This Privacy Policy applies when you:

• access or use the Platform's website and services;
• register an account, publish content, participate in interactions, or make a platform support payment; or
• contact us through customer support or other channels.

Information We Collect

2.1 Information You Provide

• Account Information: The email address you provide when registering (used for login and verification), as well as your display name, avatar, bio, and other profile information.
• User Content: The prompts you publish (title, summary, content, cover image, category, tags, etc.), comments, reports, replies, and feedback.
• Interaction Information: Records of the prompts you like, save, copy/download, and view, as well as your notification and marketing preferences.
• Payment Information: When you tip a prompt creator, we record the payment amount, currency, message, prompt, creator, and the 10% platform and 90% creator allocations. If you save bank details as a creator, we encrypt and store the account information for manual payment arrangements; public pages show none of these details.
• Support Communications: Content you submit when contacting us by email or through in-platform channels.

2.2 Information We Collect Automatically

• Device and Technical Information: IP address, browser type and version, operating system, language settings, device identifiers, and similar data.
• Usage Logs: Pages visited, click behavior, search queries, time spent on the Platform, error logs, and similar data.
• Cookies and Local Storage: Login sessions, preference settings, and identifiers used for analytics (see Section 4).
• View-Deduplication Information: Anonymous identifiers used to count prompt views (not directly linked to your account identity).

2.3 Third-Party Login Information

When you sign in with a Google or GitHub account, we receive the corresponding login identifier, email address, and avatar (and other public profile data) in accordance with your authorization. The exact scope of information received is governed by the permissions shown by the third-party provider at the time you authorize the login.

2.4 Payment Information

Tip payments are collected by Soulriddle and processed by third-party payment providers such as Stripe. Soulriddle records the prompt and creator associated with a tip to calculate the creator's 90% share. If you save a card in your Wallet or Stripe Checkout, Stripe stores it for future payments; you can remove it from your Wallet or during Checkout. Link sign-in and saved Link details are managed by Stripe. We retain a Stripe customer reference but not your full card number. We receive transaction and payment outcome data for receipts, creator income, support, refunds, disputes, accounting, and compliance.

How We Use Your Information

We process your information on the basis of what is necessary to provide the service, your consent, performance of a contract, and our legitimate interests (such as security, abuse prevention, and service improvement). Specifically, we use your information to:

• create and maintain your account and complete login and identity verification;
• publish, display, distribute, and archive the prompts and comments you submit, and identify content authors;
• provide platform features such as likes, saves, copies, view statistics, and leaderboards;
• process platform support payments and maintain transaction, refund, dispute, and reconciliation records;
• review content, handle reports, and prevent fraud and abuse (including CAPTCHA and rate limiting);
• provide customer support and respond to your inquiries and complaints;
• analyze usage to improve the product experience, fix faults, and keep the service secure; and
• send notifications and marketing communications where you have authorized them (you may opt out at any time).

We do not use your private data to train global AI models, and we do not sell your unpublished content or private information to any third party.

Cookies and Local Storage

We use cookies and browser local storage for:

• essential functions: maintaining login sessions, security verification, and abuse prevention;
• preferences: language, view mode, filter settings, and similar preferences; and
• analytics: anonymously understanding traffic and usage patterns to improve the service.

You can manage or clear cookies through your browser settings. Disabling essential cookies may make core features such as login and platform support payments unavailable.

How We Share and Disclose Information

We do not sell your personal information. We share information only in the following circumstances:

• Service Providers: third parties that provide infrastructure, databases, authentication, payments, hosting, analytics, and security services (such as Supabase, Stripe, cloud providers, and analytics tools). These providers process your information only to the extent necessary to provide services to us and are bound by confidentiality obligations.
• Public Information: profile information you choose to make public (display name, avatar, bio) and the content you publish will be visible to all users. Creator income and saved bank details are private account information.
• Legal Requirements: we may disclose necessary information to comply with laws, regulations, or judicial or administrative proceedings, or to protect the rights, property, and safety of the Platform, other users, and the public.
• Business Transfers: in the event of a merger, acquisition, reorganization, or asset transfer, your information may be transferred as one of the assets, and we will notify you in a reasonable manner.

International Data Transfers

Some of the service providers we use (such as database, payment, and authentication services) may store or process data on servers located outside your country or region, including in the United States. By using the Platform, you acknowledge and consent to such cross-border transfers.

Data Security

We take reasonable technical and administrative measures to protect your information, including:

• encryption of data in transit and at rest;
• access controls and the principle of least privilege;
• login CAPTCHA, rate limiting, and abuse detection; and
• regular reviews and security hardening.

Please note, however, that no method of transmission over the Internet can be guaranteed to be completely secure. You should safeguard your account credentials and are responsible for activity under your account.

Data Retention

We retain your personal information only for as long as necessary to achieve the purposes described in this policy, including legal, accounting, and compliance requirements. Specifically:

• account information and user content are retained while your account remains active;
• platform payment, transaction, refund, dispute, and reconciliation records are retained longer to meet financial and tax compliance requirements; and
• after account deletion, we will delete or anonymize your personal information, except for records that must be retained for legal reasons, dispute resolution, or fraud prevention.

Please note: deleting your account does not automatically remove copies of your publicly published prompts that other users have already copied or saved. Whether content involving the rights of others is removed is governed by the Platform's content management rules.

Your Rights and Choices

Regardless of your location, we endeavor to provide you with the following rights:

• Access and Portability: request a copy of the personal information we hold about you;
• Correction: update your profile and preferences at any time in your account settings;
• Deletion: delete your account and request deletion of your personal information;
• Withdrawal of Consent: withdraw consent for processing based on consent, such as marketing notifications;
• Opt-Out: opt out of marketing communications at any time via the unsubscribe link in any email; and
• Complaints: the right to lodge a complaint with your local supervisory authority.

You may submit a rights request through the contact details in Section 12, and we will respond within a reasonable time. To verify your identity, we may ask you to provide necessary information.

Children's Privacy

The Platform is not directed to children under 13, and we do not knowingly collect personal information from children. If we become aware that a user under 13 has registered, we will delete the account and related information. Users under 18 should use non-payment features with the consent and supervision of a parent or guardian. Platform support payments are only available to users who are at least 18 years old and have reached the legal age of majority where they live.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and update the "Last Updated" date; material changes will be announced through in-platform notifications or email. Your continued use of the Platform after changes take effect constitutes acceptance of the updated policy.

Soulriddle is operated by COOLTECH AI CREAT LIMITED, a company registered in Hong Kong.

Address: RM08, 2/F, NO. 143 WAI YIP ST, KWUN TONG, HONG KONG

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at: support@soulriddle.com

We provide an initial response to support enquiries within 24 hours. This does not promise completion of a request, issue resolution, or bank processing time within 24 hours.

Before sending feedback or screenshots, remove passwords, payment credentials, private prompt content, and other sensitive information.