OnBrand is operated by RIZZ AI LAB, based in Riga, Latvia (European Union). This policy explains what we collect, why, where it lives, who else processes it, and how you can see, correct or delete it. Plain language, no lawyer theatre.
OnBrand is a product of RIZZ AI LAB, a company based in Riga, Latvia. When this policy says we, us or OnBrand, it means RIZZ AI LAB acting as the data controller for the information you give us through the OnBrand product and site.
You can reach us any time at yes@rizzgroup.org.
Account data. Your email address, and, if you provide one, your name. This is what we use to sign you in and to talk to you about the product.
Brand kit content. The things you upload or type to define a brand · reference images, palette, camera and grade choices, voice rules, era and episode text, and any notes.
Generated content. Every image, caption, reply, plan, verdict, insight and report the engine produces on your behalf, plus the prompts and scores that produced them.
Usage analytics. Product events that help us fix bugs and improve the engine · which page loaded, which button was pressed, how long a render took, error traces. We do not sell this data.
Waitlist. If you join the waitlist, we store your email, position, join time, referral code, and (optionally) the referrer who invited you.
Connected accounts. If you connect Instagram or TikTok, we store the encrypted access token, the account id, and metadata needed to publish and read stats. We do not read your DMs.
Billing. If and when paid plans go live, our payment processor (Stripe) handles card data directly. We only see plan, status, and invoice ids.
To run the service you asked for · generating on-brand content, scheduling and publishing it, replying to comments, and reporting on results.
To keep the service safe · rate limits, abuse checks, safety pre-checks on persona briefs (for example, to refuse impersonation of real people).
To improve the engine · the Taste Engine learns from your approve, reject, edit and redo decisions so the next batch is closer to your brand. This learning stays inside your account.
To talk to you · transactional emails (weekly brain report, waitlist welcome, account notices) and, only if you opt in, product updates.
Databases and file storage are provided by our infrastructure partner on servers located in the European Union. We select EU regions where the option exists.
Some third-party processors are based outside the EU. Where that is the case, transfers rely on the European Commission's Standard Contractual Clauses or an equivalent lawful mechanism.
OnBrand is a generative-AI product. Images, video, captions, replies and scores are produced by machine-learning models · not by human editors. You are always the one who approves what publishes (unless you turn autopilot on for your own account).
Where the platform you publish to requires AI-content labelling, OnBrand supports adding the appropriate label to each post. It is your responsibility to keep that labelling turned on for the platforms and jurisdictions that require it.
We do not train foundation models on your private brand data. Your inputs are used to run your account and to teach your own Taste Engine, not a shared public model.
We use a small, deliberate set of processors. Each only receives what it needs to do its job.
fal.ai · runs image and video generation models on our behalf. Receives the prompt, brand-kit reference material and generation parameters. Returns the rendered asset.
Anthropic (via our AI gateway) · runs the language model used for captions, replies, scoring and brain rationales. Receives the prompt and returns the text.
Resend · sends transactional email (brain reports, waitlist welcome, auth). Receives the recipient address and email body.
Stripe · processes payments when paid plans are active. Receives your card data directly (we never see it) and returns plan status.
Meta (Instagram Graph API) and TikTok · used only if you connect your account. Receives publish requests and returns post ids and public metrics for your own accounts.
Our infrastructure provider · hosts the database, file storage and edge functions in EU regions.
Account and brand-kit data · kept while your account is active. Deleted within 30 days of you closing the account, except where we are legally required to retain records longer (for example, tax invoices for the period required by Latvian and EU law).
Generated content and Taste-Engine verdicts · kept for as long as the brand exists in your account, because it powers the learning loop. Deleted with the brand.
Usage analytics and error logs · rolled up and pruned within 12 months.
Waitlist entries · kept until launch is complete and for a reasonable window after, unless you ask us to remove you sooner.
Under the GDPR you can ask us to show you the personal data we hold about you, correct it, export it in a portable format, restrict how we process it, object to processing, or delete it. You also have the right to complain to a supervisory authority · in Latvia this is the Data State Inspectorate.
Account deletion is available in Settings. It removes your brands, brand-kit content, generated content, verdicts, plans and reports. Email us at yes@rizzgroup.org if you need us to confirm the deletion or handle it for you.
We use the minimum cookies required to keep you signed in and to remember settings like theme. We do not use third-party advertising cookies. If we add product analytics that uses cookies, we will surface a clear choice before setting them.
Data is encrypted in transit. Sensitive credentials (like connected-account access tokens) are encrypted at rest. Access to production systems is limited to a small number of RIZZ AI LAB engineers, over strong authentication.
No system is perfect. If we ever discover a breach that affects your data, we will notify affected users and the relevant authority within the timelines the GDPR requires.
OnBrand is not intended for people under 16. Do not use the service if you are under that age. If you believe a child has provided us with personal data, contact yes@rizzgroup.org and we will delete it.
We may update this policy as the product grows. Material changes will be announced in-app or by email at least 14 days before they take effect. The date at the top of this page is always the current version.
RIZZ AI LAB · Riga, Latvia · yes@rizzgroup.org. We answer.