How I handle your data.
When you hire me, you trust me with information about your business and your customers. These are the rules I follow every time.
Last updated: November 2, 2026
1. You get a written data plan
Before I set up any AI tool or automation, you get a one-page plan that lists:
- Each tool we'll use, and the company behind it
- What information each tool will see
- What information stays out of every tool
- Where the data is stored and who can access it
Nothing goes live until you've read it and said yes.
2. Sensitive information stays out of AI tools
Unless you agree otherwise in writing, I never put these into AI tools:
- Health or medical information
- Social Security numbers, bank, card or account numbers
- Passwords or security codes
- Anything a law or contract requires you to keep private
Where a task needs real records, I remove names and identifying details first when possible.
3. Business-grade tools only
When an AI tool will see your business information, I choose plans whose terms say your data isn't used to train their models, and I tell you which plan we're using.
4. Your accounts, your data
Tools are set up in your name. You pay the tool companies directly, you hold the main login, and you can remove my access at any time. If we stop working together, I hand over everything and delete any copies I hold.
5. Access only as needed
I ask for the least access a job needs, prefer being added as a user over sharing passwords, and store any credentials in an encrypted password manager.
6. Copies are temporary
When I need a copy of your data, for example to clean up a spreadsheet, I work on it on an encrypted computer and delete it when the job is done.
7. If something goes wrong
If I ever learn that your data may have been exposed, I'll tell you promptly and help you take the next steps.
Questions
Ask me anything about how your information is handled: hello@riffly.com. For how this website itself handles visitor information, see the privacy policy.