Privacy Policy

Last updated August 26, 2026

1. Who we are

Riff Pile ("we," "us," or "the Service") is a multi-tenant band archive operated by Dev Hero, based in Rhode Island, USA. We provide private workspaces for bands to store songs, recordings, show materials, and related content.

Contact: hello@riffpile.com.

2. Scope

This Privacy Policy explains what information we collect, how we use it, and the choices available to you when you use Riff Pile. It applies to the Service at riffpile.com and related apps or sites we operate. It does not cover third-party websites or services that we do not control.

3. What we collect

Depending on how you use the Service, we may collect:

Account data — name, email address, and authentication details processed by our sign-in provider (Clerk), plus profile details you choose to set in the Service.
Band & workspace data — band name, membership, roles, invites, access-code usage, and settings for each workspace.
Band content — songs, notes, audio recordings, images (such as show flyers and album art), setlists, practices, shows, availability, and other materials you or your bandmates upload.
Billing data — subscription status, plan, and customer or subscription identifiers via Stripe. Payment card details are handled by Stripe; we do not store full card numbers.
Usage & technical data — basic logs such as IP address, browser or device type, timestamps, and error reports needed to run, secure, and debug the Service.
Cookies & similar technologies — session and authentication cookies (including those set by Clerk) and other cookies or local storage needed for sign-in, security, and core product features. We do not use advertising trackers as part of the core Service.

4. How we use information

We use this information to:

Provide, maintain, and improve the Service
Authenticate users and enforce band membership and plan limits
Store and deliver your Content within private workspaces
Process subscriptions, trials, and complimentary access
Prevent abuse, secure the Service, and respond to support requests
Comply with legal obligations where applicable

We do not sell your personal information or band content. We do not use your recordings or other Content to train public AI models.

5. Private workspaces

Band workspaces are private by default. Content is available to authenticated members of that band (and to us as needed to operate and support the Service). We do not make your archive publicly searchable or publicly listed as part of normal operation.

6. Who we share with

We use trusted service providers ("processors") to operate Riff Pile. They process data only to provide services to us, under appropriate contractual terms. These include, at a high level:

Clerk — authentication and account identity
Stripe — subscription billing and payment processing
Cloudflare (including R2) — file storage and related delivery
Database and application hosting providers (for example Neon and Vercel) — storing app data and running the Service

We may also disclose information if required by law, legal process, or government request, or when we believe disclosure is necessary to protect the security of the Service, our users, or Dev Hero.

If we were involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction, subject to continued confidentiality commitments where applicable.

7. International users

We are based in the United States. If you access the Service from outside the U.S., you understand that we process information in the United States and in other locations where our providers operate, as needed to provide the Service.

Depending on your location, you may have rights to access, correct, delete, or restrict certain personal information, or to object to certain processing. To make a request, email hello@riffpile.com. We will respond within a reasonable period. We may need to verify your identity and may retain information where we have a lawful reason to do so (for example billing records or security logs).

8. Retention & deletion

We keep account and band data while your workspace is active and as needed to provide the Service. Technical logs are retained for a limited period for security and operations.

To delete an account or band workspace, email hello@riffpile.com. We will remove associated data within a reasonable period, except where we must retain records for legal, security, or billing reasons, or where copies may remain briefly in backups until those systems rotate.

Band admins control membership; removing a member does not by itself delete Content other members uploaded to the workspace.

9. Security

Access to band content is limited to authenticated members of that band. Uploads are stored in private object storage and typically served through time-limited links. We use industry-standard measures appropriate to a small SaaS product, but no method of transmission or storage is 100% secure. Please use strong account credentials and protect invite links.

10. Children

Riff Pile is intended for adults and working bands. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

11. Changes

We may update this policy from time to time. The "Last updated" date at the top will change when we do. Where changes are material, we may provide additional notice. Continued use of the Service after an update means you accept the revised policy.

12. Contact

Privacy questions, data requests, or deletion requests: hello@riffpile.com.

Operator: Dev Hero, Rhode Island, USA.