Privacy Policy
This Privacy Policy explains how rabbl ("rabbl", "we", "us" or "our") collects, uses, shares and protects information when you use our website and the rabbl synthetic audience research platform (the "Service").
rabbl is operated by Flat Earth Yeti Pty Ltd. If you have any questions about this policy or how we handle your information, contact us at hello@flatearthyeti.com.
By using rabbl, you agree to the practices described in this Privacy Policy.
1. A quick summary
- We collect the minimum we need to run your account, take payment, and deliver the Service.
- The briefs, prompts, stimulus and audience data you submit to run analysis are processed for your session and then discarded. We do not build a permanent store of your research inputs.
- rabbl uses YouTube API Services to retrieve publicly available information for competitor and creative intelligence. See Section 5.
- We use a small number of trusted third parties (for authentication, payments and AI processing). We do not sell your personal information.
This summary is for convenience only. Please read the full policy below.
2. Information we collect
Account information. When you create an account, we collect your name, email address and authentication details. Sign-in and account management are handled by our authentication provider, Clerk.
Billing information. When you subscribe to a paid plan, payment is processed by Stripe. rabbl does not receive or store your full card number. We retain limited billing records (such as plan, transaction identifiers and invoices) needed to run your subscription and meet our tax and accounting obligations.
Research inputs. To use the Service, you submit briefs, questions, stimulus and, optionally, audience data files. As described in Section 6 (Data retention), these inputs are processed to generate your results and are not retained after your session ends.
Information collected automatically. When you use the Service, we and our providers collect certain technical information automatically, including device and browser type, IP address, and usage data. See Section 8 (Cookies and similar technologies).
YouTube API Data. When features that rely on YouTube are used, rabbl retrieves publicly available data through the YouTube Data API. See Section 5.
3. How we use your information
We use the information we collect to:
- provide, operate and maintain the Service;
- create and manage your account and authenticate you;
- process payments and manage your subscription;
- generate the analysis and results you request;
- communicate with you about your account, security and service updates;
- monitor, secure, debug and improve the Service; and
- comply with our legal obligations.
4. How we share your information
We share information only as needed to run the Service, and with providers who are bound to protect it. Our key providers ("sub-processors") are:
| Provider | Purpose |
|---|---|
| Clerk | Account authentication and management |
| Stripe | Payment processing |
| Anthropic, OpenAI, Google | AI model processing used to generate results |
| Google / YouTube | Source of publicly available data via the YouTube Data API |
| Replit | Application hosting and infrastructure |
To generate results, the briefs, questions and stimulus you submit are transmitted to our AI model providers (Anthropic, OpenAI and Google) for processing. These providers process the data to return a response and, under our agreements with them, do not use it to train their models.
We may also disclose information if required to do so by law, to protect our rights or the safety of others, or in connection with a merger, acquisition or sale of assets. We do not sell your personal information.
5. YouTube API Services
rabbl uses YouTube API Services. By using features that rely on YouTube data, you are also agreeing to be bound by the YouTube Terms of Service, available at https://www.youtube.com/t/terms.
Google's handling of data is governed by the Google Privacy Policy, available at http://www.google.com/policies/privacy.
What we access. rabbl uses the YouTube Data API to retrieve publicly available information about videos and channels, such as titles, descriptions, thumbnails, publicly reported view and engagement metrics, and related metadata. rabbl uses this information solely to provide competitor and creative intelligence within the Service.
What we do not do. rabbl does not require you to sign in to YouTube or Google to use the Service, and does not access your personal YouTube account, viewing history or private YouTube data.
How we handle it. YouTube API Data is retrieved on demand, used to produce your results during your session, and then discarded. rabbl does not build or maintain a persistent store of YouTube API Data.
You can review and control the data that Google shares with third-party applications, and revoke access where applicable, through the Google security settings page at https://security.google.com/settings/security/permissions.
6. Data retention
- Research inputs (briefs, questions, stimulus, uploaded audience data): processed for your session and not retained afterwards. They are held only in memory for the duration of processing and then discarded.
- YouTube API Data: not retained. Retrieved on demand and discarded after your session, as described in Section 5.
- Account information: retained while your account is active. Following account closure, it is deleted within 30 days, except where we must keep it to meet a legal obligation.
- Billing records: retained for the period required by applicable tax and accounting law (typically 7 years).
- Automatically collected data: retained for up to 12 months for security and service-improvement purposes.
7. Data security
We use appropriate technical and organisational measures to protect information, including encryption in transit and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Cookies and similar technologies
We and our providers use cookies and similar technologies on our website and within the Service. These are used for:
- Essential purposes: authentication and keeping you signed in (via Clerk), and secure payment processing (via Stripe). The Service will not function correctly without these.
- Analytics purposes: to understand how the Service is used and to improve it, via Microsoft Clarity.
You can control cookies through your browser settings. Blocking essential cookies may prevent parts of the Service from working.
9. Your privacy rights
Depending on where you live, you may have rights over your personal information, including the right to access, correct, delete, or port your information, to object to or restrict certain processing, and to withdraw consent.
- If you are in the European Economic Area or the United Kingdom (GDPR / UK GDPR): you have the rights described above and may lodge a complaint with your local data protection authority.
- If you are in California (CCPA/CPRA): you have the right to know what personal information we collect, to request deletion, to correct it, and to opt out of "sale" or "sharing" of personal information. We do not sell your personal information.
- If you are in Australia (Australian Privacy Principles): you may request access to and correction of your personal information and make a complaint about how we handle it.
To exercise any of these rights, contact us at hello@flatearthyeti.com. We will respond within the timeframe required by applicable law.
10. International data transfers
rabbl operates globally and uses providers located in various countries, including the United States. Where your information is transferred across borders, we take steps to ensure it is protected in accordance with applicable law.
11. Children's privacy
The Service is not directed to children, and we do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us with personal information, please contact us and we will delete it.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
13. Contact us
If you have any questions, requests or complaints about this Privacy Policy or our handling of your information, contact us at: hello@flatearthyeti.com