LEGAL

Privacy Policy

This policy explains what information Rikol.ai collects when you run KOL campaigns through our platform, how we use it, and the choices you have. It covers our website, the campaign workspace, and the AI agents that act on your behalf.

Last updated · 17 June 2026

Placeholder draft. Sample copy for layout only — not legal advice and not the final policy. To be replaced with reviewed text before launch.

01Who we are

Rikol.ai is operated by Hoppi (M) Sdn Bhd (“Rikol”, “we”, “us”). We provide an AI agent that briefs, matches, recruits, and pays creators for brand campaigns across Malaysia and Singapore.

For the personal data we process about you as an account holder, we act as the data controller. For data we process on your instruction while running your campaigns, we act as a processor on your behalf.

02Information we collect

We collect the following categories of information to operate the service:

Account data — your name, work email, phone number, workspace name, and authentication identifiers.
Campaign data — briefs, budgets, messages, approvals, and other content you create in the workspace.
Creator data — public profile and performance signals used to match and rank creators for your brief.
Billing data — plan, credits, and payment metadata processed by our payment provider (we do not store full card numbers).
Usage data — device, log, and cookie information collected automatically when you use the site or app.

03How we use information

We use your information to provide and improve the service: to authenticate you, run matching and outreach, draft and summarise messages, process billing, surface campaign results, and keep the platform secure.

We use a limited set of AI providers to draft, summarise, and classify campaign content. We do not sell your personal data, and we do not use the contents of your campaigns to train third-party foundation models.

05Data retention

We retain account and campaign data for as long as your workspace is active and as needed to comply with legal, accounting, and reporting obligations. When you close a workspace, we delete or anonymise associated data within a defined window unless a longer period is legally required.

06Security

We protect data with encryption in transit and at rest, workspace-level access controls, least-privilege internal access, and audit logging. See our Trust & Security page for the controls we operate. No method of transmission or storage is completely secure, but we work to protect your information using industry-standard safeguards.

07Your rights

Subject to applicable law — including Malaysia’s PDPA and Singapore’s PDPA — you may request access to, correction of, or deletion of your personal data, and you may object to or restrict certain processing. To exercise these rights, contact us using the details below.

08International transfers

Our infrastructure and some sub-processors operate outside your country of residence. Where data is transferred across borders, we rely on appropriate safeguards and process it consistently with this policy.

09Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “last updated” date above and, where appropriate, notify you in the product.

10Contact us

Questions about this policy or your data? Email privacy@rikol.ai and we’ll route it to the right team.