Privacy Policy
Effective date: [EFFECTIVE DATE]
1. Introduction
This Privacy Policy explains how [LEGAL ENTITY NAME] ("Rainmaker," "we," "us") collects, uses, and protects information through the Rainmaker platform (the "Service").
2. Information We Collect
- Account information: email address, hashed password, and firm name.
- Profile / DNA data: your name, role, writing samples, business preferences, and targeting criteria.
- Pipeline & Rolodex data: information about prospective clients and contacts that you add, or that the Service identifies and enriches. This may include third-party individuals who are not themselves users of the Service. You are responsible for your own compliance in collecting and using this data.
- Integration data: data from Outlook, RocketReach, and Apollo, connected through their own OAuth or API consent flows. You can disconnect these integrations at any time.
- Billing data: processed by Stripe; we do not store full card numbers.
- Usage and log data: information about how you interact with the Service.
3. How We Use Information
We use the information we collect to:
- Operate the Service, including generating AI-assisted leads and email drafts;
- Personalize your experience;
- Process billing;
- Communicate with you about the Service;
- Maintain security and prevent abuse; and
- Comply with legal obligations.
4. AI Processing
Your profile and pipeline data may be sent to Anthropic's Claude API to generate leads, scoring, and draft content. We do not control how Anthropic handles data beyond what is described in their own terms; see Anthropic's privacy policy for details.
5. Third-Party Service Providers
We share data with the following categories of service providers as needed to operate the Service:
- Anthropic (AI processing)
- Stripe (billing)
- Neon (database hosting)
- Vercel (application hosting)
- Microsoft (if you connect Outlook)
- RocketReach and Apollo (if enrichment is enabled)
Each of these providers has its own privacy policy governing its handling of data.
6. Data Retention
We retain your data while your account is active, and for a reasonable period after termination. We will delete or anonymize your data upon request, subject to any legal retention requirements.
7. Your Rights
You may request access to, correction of, export of, or deletion of your data by contacting [CONTACT EMAIL]. Third parties who appear in a user's Rolodex or pipeline and who wish to be removed may also contact [CONTACT EMAIL].
8. Data Security
We use industry-standard measures to protect your information, including encrypted connections, hashed passwords, and access controls. No system is 100% secure, and we cannot guarantee absolute security.
9. Cookies
We use a single session cookie (rm_session) for authentication purposes only. We do not currently use third-party advertising or tracking cookies.
10. Children's Privacy
The Service is not directed to individuals under the age of 18.
11. International Users
[DATA TRANSFER / GDPR-APPLICABILITY TBD — consult counsel if EU/UK users are expected].
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes through the Service or by email.
13. Contact
Questions about this Privacy Policy can be sent to [CONTACT EMAIL].