Privacy policy

Rumorly helps software companies understand where their customers heard about them. This page covers two kinds of data: data about you, our customer and visitor, and data our customers send us about their customers.

Who we are

Rumorly is run by Rumorly ("we"), based in the European Union. For anything about your data, write to hello@rumorly.io.

Country

Romania

Data about you

• Account data: your name, email, password hash and workspace name, to run your account.
• Billing data: handled by Stripe. We store your Stripe customer id and plan, never card numbers.
• Usage data: server logs (IP address, user agent, timestamps) kept for 30 days for security and debugging.
• This website uses no tracking cookies and no third-party analytics.

Data our customers send us

When a company uses Rumorly, it sends us its respondents' answers and identifiers (email, name, a user id) and connects its CRM and billing account. For this data the customer is the controller and we are the processor: we process it only on their instructions, as set out in our Data Processing Agreement.

• Answers are free text and may contain names. We send the answer text, without the respondent's email or name, to our AI provider to classify it (see subprocessors).
• Our AI provider does not train on this data.
• Customers can erase a person at any time (DELETE /v1/people), which removes their answers and matches and blanks the Rumorly fields in the connected CRM.

Where data is stored

Our primary database is hosted in the EU. Some subprocessors are in the US and are covered by Standard Contractual Clauses; the subprocessor list says which.

How long we keep it

Account data: while your account is open, then 30 days. Customer data: until the customer deletes it or closes their workspace, then 30 days. Backups roll off after 30 days.

Your rights

Under the GDPR you can ask for access to, correction of, deletion of, or a copy of your data, and object to processing. If you answered a survey for one of our customers, contact that company first; we'll help them respond. You can also complain to the Romanian supervisory authority (ANSPDCP) or your local one.