Effective 2026-10-09

Privacy Policy

This policy explains what Riff collects, why, who sees it, and how long we keep it. Riff is a service of Whappa LLC ("we", "us"). Riff answers a business's phone calls with an AI voice, asks questions, writes up the job (name, phone, address, problem), and books a visit. Demonstrations simulate jobs and visits; they do not book actual services. Demo texting starts after carrier approval and only with the recipient's ticked consent; see the Text messages page.

Who this covers

• Business owners and staff who sign in, build a front desk, or receive job write-ups.
• Callers who phone a business that uses Riff.
• Visitors to this website, including people who try the demo.

What we collect

• Account email. You sign in with Google. We receive your account email and use it to attach a front desk to your account.
• Business setup details you give us, such as business name, greeting, and hours.
• Call audio and recordings. Calls may be recorded. A recording notice is part of the greeting.
• What callers say, including the name, phone number, address, and problem a caller gives on a call, and the booking that results.
• The address on the demo map. On a demo call, the map on the caller's own screen follows the address as Riff hears it: the city, then the street, then the house. We place it from our own copy of the address list and draw it from our own copy of OpenStreetMap, so no map company sees the address. Only the caller's own page gets the map. A confirmed address's map point is kept with that call's record on the caller's page and deleted with it after 30 days; it is not copied into the call record or our Call log API.
• Phone numbers of callers.
• Browser cookies. Google sign-in uses a session cookie. The demo uses a cookie that holds a visitor's draft and call lease.
• A visitor ID. Each browser gets a random ID (the riff-visitor cookie, with a copy in the browser's local storage). It lasts two years and is renewed on each visit. We use it to count visits and to see which pages and demo steps people reach. If you later sign up or give us your name, email, or phone number, that information is linked to this ID.
• Your IP address and what it tells us. With each page visit and demo step we record your IP address, an estimate of your city, state, and network (for example, your mobile carrier), made on our own computer from an offline database, and the kind of device and browser you use (for example, "iPhone, Safari"). We do not send your IP address to anyone to look it up.
• How far a demo call got. Whether the caller gave a name, described the problem, was offered times, and booked.
• Phone numbers and sign-in details linked to your visitor ID. If you call our demo or your trial line from your phone, we link the caller ID to your visitor ID. We also link a number you tell us you will call from, the emergency number you give when you build a front desk, and the email and name from your Google sign-in.
• A short record of each demo or trial call. How long it lasted, whether it was by phone or in the browser, how far it got, and whether it booked. We do not copy what was said into this record.
• Campaign tags in the link you followed (for example utm_source), and which ad network the link came from. We do not keep the ad network's click ID.
• Microphone audio from your browser, only during a demo call that you start yourself.

We do not collect payment details on this website today.

Why we use it

• To answer calls, write up jobs, and book visits for the business that took the call.
• To send text messages as described on the Text messages page.
• To sign you in and keep your front desk attached to your account.
• To run the live call view and the demo.
• To understand how people find and use this website and the demo, to fix what does not work, and to tell our own test traffic apart from real visitors.
• To contact business owners who gave us a phone number about the Riff service they tried, and to keep short notes of those calls. Notes are kept until you ask us to delete them.

Who we share it with

• The business whose front desk took the call. It receives the job write-up and the booking.
• Our telephony providers, Telnyx and SignalWire, which carry calls and, when enabled, text messages. They process the phone numbers and call or message data needed to deliver them.
• Our hosting provider, Amazon Web Services, which hosts this website (S3 and CloudFront).
• Cloudflare, which carries traffic to this website and to Riff, and so sees your IP address as it passes.
• Google, for sign-in.

Text messages, and the mobile opt-in data and consent behind them, will not be shared with third parties or affiliates for marketing or promotional purposes. We never sell them.

How long we keep it

Riff answers calls for the business that uses it. That business decides what it does with its own call records. These are the limits Riff applies by default.

• Call recordings are kept for up to 30 days by default, then deleted from Riff. A business that uses Riff may set a longer period for its own recordings. Ask the business if you want to know how long it keeps yours.
• Call transcripts, the details Riff captured on the call, and booking receipts are deleted after 30 days.
• Job write-ups and texts that Riff sends to a business belong to that business. We do not control how long the business keeps them.
• Records of text consent (the number, the time and the wording shown) are kept as proof of your agreement.
• A demo business that nobody has claimed may be deleted after 30 days.
• IP addresses recorded with website visits are erased after 30 days, and from our backup copies within 45 days. The estimated place, network, and device stay with the visit record.
• Notes of our calls with business owners, and the phone numbers and sign-in details linked to your visitor ID, are kept until you ask us to delete them. Once deleted, they leave our backup copies within 30 days.

Security

This website is served over HTTPS.

Report misuse

If you got a text or call from Riff that you did not want, or you think someone is misusing Riff, email [email protected]. Reply STOP to any text to stop it.

Your choices and deletion requests

To ask what we hold about you, or to ask us to delete it, email [email protected]. To stop text messages, reply STOP to any message. See Text messages.

Children

Riff is not directed to children under 13, and we do not knowingly collect information from them.

Changes

If we change this policy we will post the new version here and change the effective date above.

Related pages

Terms of Service · Text messages

Contact

Whappa LLC, a Texas limited liability company
Questions and requests: [email protected]
Report misuse or unwanted texts: [email protected]
Billing: [email protected]
Mailing address: 9901 Brodie Lane, Suite 1490, Austin, TX 78748