Privacy Policy

Rumi AI LLC (“Rumi,” “we,” “us,” or “our”) builds an AI assistant that people reach through messaging apps they already use. Rumi AI is founded and based in Los Angeles. This Privacy Policy explains what information we collect, how we use and share it, and the choices you have. It applies to this website, to the assistant we provide, and to the plans we sell.

When you ask for early access, we collect:

• Your name and email address.
• Which messaging app you use, and what you tell us you would like the assistant to handle first.

If you buy a plan, we also collect:

• Billing contact details: the name and email address on the subscription, and any billing address or tax details the purchase needs.
• The subscription record itself: which plan you are on, when it started, and whether it is still running.

Your card details go to the payment processor that takes the payment. This site does not receive them and does not store them.

If you go on to use the assistant, we also handle:

• The messages you send her and her replies, including voice notes and their transcripts, which are kept as her conversation history so she can remember context you have given her.
• Content from accounts you choose to connect — for example the mail and calendar entries she reads in order to answer a question you asked.
• Notes she keeps about your business because you told her: contacts, preferences, and the details of work in progress.

We also collect ordinary site-usage and analytics data, such as pages viewed and general device and interaction information.

We use the information we collect to:

• Reply to your early-access request and set up your account.
• Provide the assistant and answer the things you ask her.
• Take payment for a plan, and provide and administer the subscription it buys.
• Send you billing notices: a receipt, a renewal, a price change, or anything else about what you are paying for.
• Operate, maintain, support, and improve the Services.
• Comply with our legal obligations.

You decide which accounts to connect and what to approve on the provider’s own consent screen. The permission the assistant holds for your mail is read-only, enforced by that permission rather than by our configuration: a request to send, delete, or change anything fails at the provider’s end.

You can withdraw that approval at any time through your account settings with the provider, and you can ask us to disconnect it for you.

We share personal information only where providing the Services requires it, and only under contract. Most of the parties below act as processors on our behalf; where one also uses data for its own purposes, this section says so. They fall into the following categories:

• AI model providers, which process the messages needed to answer you.
• Cloud hosting and infrastructure providers.
• The messaging platforms you choose to reach her through.
• The payment processor that takes payment for a plan and holds the card details, and the billing systems that keep the subscription record.
• Analytics providers, and the contact system that holds our early-access list.

Where the payment processor’s use of card data is for its own purposes rather than ours, it acts as a controller of that data and its own privacy notice governs it.

We may also disclose information when required by law or to protect our rights. We do not sell your personal information.

To access, correct, or delete the personal information we hold about you, or to be removed from the early-access list, email us at support@rumi.build and we will respond as required by applicable law. That is the same address whether you are a customer, someone waiting on the early-access list, or both. Some billing records are kept after the rest is deleted, and the next section says why.

We retain personal information for as long as needed to provide the Services, fulfill the purposes described in this policy, resolve disputes, and comply with our legal obligations. When you ask us to delete your data, we delete it and confirm when it is done; backups roll off on their own schedule, so a deletion takes a period of time to reach every copy, and we will tell you what that period is if you ask. Billing records are the exception. Where tax or accounting law requires us to keep a record of a payment you made, we keep that record for as long as the law requires, after the rest of your data has gone.

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, and some of the important ones are enforced rather than promised — read-only mail access, and an approval step for outbound writes that the database enforces. Our security page explains both those and the limits of what we can promise while the assistant runs on machines we operate. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

The Services are intended for businesses and are not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the effective date above and, where appropriate, provide additional notice. Your continued use of the Services after changes take effect constitutes acceptance of the updated policy.

Questions about this Privacy Policy or your data? Contact us at support@rumi.build.