LAST UPDATED OCTOBER 2026
SIA "RIZZ GROUP", registered in Riga, Latvia, is the data controller for everything described here.
For any privacy question, or to exercise any of the rights below, email studio@rizzgroup.ai.
From the brief form: your name, email address, phone number and company. The phone number is required: it is how your director reaches you about your brief, and it is never shared with anyone outside SIA "RIZZ GROUP" or used for marketing. The email address is where your sample video goes, and it is also the account we create for you at delivery.
About the project: what you want made, your idea in your own words, your brand or product and its link, who the film is for, your timing, and the budget range you picked. We use these to make the film.
Files you upload: logos, product shots, brand guidelines and similar. We use them only to make your project.
Your confidentiality agreement: the name you typed, the time, the version of the text and a fingerprint of it, plus your IP address and browser identifier. This is the record that you accepted it, and it is why we keep it.
Anti-abuse: your IP address and submission times, so a public form cannot be flooded. We use Cloudflare Turnstile to tell people from bots.
Messages you send your director in the thread.
We process your contact and project details to take steps at your request and to perform our agreement with you.
We keep the confidentiality acceptance record, and the anti-abuse data, on our legitimate interest in being able to show what was agreed and in keeping the service usable.
Our database and file storage are hosted on Supabase, in the European Union. Your files sit in private storage that is not publicly reachable — every download goes through a signed, short-lived, access-checked link.
Email is sent through Resend. The site is hosted on Vercel. Cloudflare Turnstile checks that submissions are human. If we use a CRM to track enquiries, your name, email, phone, company and project summary go into it.
These providers process data on our instructions. We do not sell your data and we do not use it for advertising.
Project data and files: for the life of the project and up to 3 years afterwards, which matches the confidentiality term.
Confidentiality acceptance records: kept for as long as they could be needed as evidence of what was agreed.
Anti-abuse logs: a short period, long enough to be useful against abuse.
Ask us to delete your data sooner and we will, unless we are required to keep something.
Under the GDPR you can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable form.
Email studio@rizzgroup.ai and we will respond within one month.
If you are not satisfied, you can complain to the Latvian Data State Inspectorate (Datu valsts inspekcija) or to the authority where you live.
We set a cookie to keep you signed in once you have an account. Cloudflare Turnstile may set what it needs to tell people from bots. We do not run advertising or cross-site tracking cookies.
This policy is governed by the law of Latvia.