Privacy Policy

Draft — not yet final. Highlighted items are placeholders that must be completed, and this text must be reviewed, before Rumple's public launch.

Effective date: [Effective date]

1. Who we are

Rumple is operated by [Company legal name]. This policy explains what information Rumple handles when you use it. See also our Terms of Service.

2. Information we store

Account: your email address, a securely hashed password (handled by our authentication provider), username and role.
Answerer information: the credential number you submit, your specialties and your verification status.
Content: your questions (as you wrote them and as rewritten for publication), answers, ratings, AI answer verifications and direct messages.
Rumple Points: your balance and point history, how many of your points are eligible for cash-out, answer rewards, and cash-out requests (amount, status and any administrator note).
Purchases: the package, amount and currency, the purchase status, any refunded amount, and Stripe's reference identifiers for the checkout and payment.
Activity: a record each time you open Rumple while signed in (including your browser's user-agent string), which questions you viewed, your notifications, and usage counters we use to limit abuse.

3. Information we do not receive

Payment card details are entered on Stripe's hosted checkout page and are handled by Stripe. Rumple does not receive or store your full card number or security code.

4. How we use information

to run your account and the question, answer and messaging features;
to review Answerer applications and credentials;
to review and rewrite questions, generate AI answers, score answers and power search;
to process purchases, refunds, rewards and cash-out requests;
to send account emails, such as confirmation and password-reset emails;
to show notifications about activity on your questions, answers and messages;
to prevent abuse, fraud and security problems.

[Legal bases for processing, where required — legal review required]

5. Who can see what

Other signed-in users can see your username, role, verification status, specialties and join date; questions; answers and their ratings; and Answerers' public statistics (such as average rating, answer counts and reputation).
Only the two participants can see a direct-message conversation.
The person who asked a question can see who viewed that question: those view records include the viewer's account.
Only you and Rumple administrators can see your credential number, point balance, purchases, cash-out requests and sign-in records.
Rumple's operators can access stored data, including messages, when needed to run, secure or support the service. [Internal access policy — business decision required]

6. Service providers

Rumple relies on these providers, which process information on our behalf:

Supabase — database, authentication and server functions; stores the information described above.
OpenAI — receives question text, answer text and search queries to review and rewrite questions, generate AI answers, score answers and support search. Your email and account identifiers are not included in these requests.
Stripe — payment processing on its hosted checkout page.
Cloudflare — hosts the Rumple website.
Google Fonts and jsDelivr — your browser loads fonts and a software library from these services, which receive your IP address and browser information when it does.
Email delivery: [Email delivery provider]

Each provider handles information under its own terms and privacy policy. [International data transfers — legal review required]

7. Information stored in your browser

Rumple stores your sign-in session in your browser's local storage so you stay signed in, and a temporary marker while you are resetting your password. Rumple does not use advertising or analytics cookies.

8. Retention

[Retention periods for each category — business/legal decision required]

9. Your choices and requests

You can update your specialties on your Profile. Rumple does not yet offer self-service account deletion or data export; to ask for either, or with any other privacy question, contact us at [Contact email].

[Jurisdiction-specific privacy rights and how to exercise them — legal review required]

10. Security

We use access controls and encrypted connections to protect your information. No online service can guarantee perfect security; please use a strong, unique password.

11. Children

Rumple is not intended for anyone under [Minimum age].

12. Changes to this policy

We may update this policy. We will update the effective date above and [How users are notified of material changes — business decision required].

13. Contact

[Company legal name]
[Postal address, if legally required]
[Contact email]