Privacy Policy

Last updated: January 2026

RabitFlow ("we", "our", "us") provides newsletter and audience engagement tools. This Privacy Policy explains how we collect, use, share and protect personal data in connection with our website, our marketing communications and our product.

1. Data we collect

From visitors and prospects

From customers and end-users

2. How we use it

3. Roles under GDPR

For our own marketing and website, we act as a data controller. For data our customers process using RabitFlow on behalf of their own audiences, we act as a data processor and our actions are governed by the data processing terms in our customer agreements.

4. Sharing

We do not sell personal data. We share it only with vetted infrastructure and service providers — for example, our cloud hosting provider, our email delivery infrastructure, and our analytics provider — under contractual safeguards. We may also disclose information where strictly required by law.

5. International transfers

Where data is transferred outside its country of origin, we rely on appropriate legal mechanisms such as Standard Contractual Clauses.

6. Retention

We retain subscriber and prospect data for as long as you remain subscribed or in active conversation with us. After unsubscribe, we keep a minimal suppression record so we do not contact you again. Customer account data is retained for the term of the agreement plus a defined post-termination period for legal and accounting purposes.

7. Your rights

Subject to local law, you may request access, correction, deletion, portability or restriction of your personal data, object to processing, or lodge a complaint with a supervisory authority. To exercise any of these rights, email privacy@rabitflow.com.

8. Unsubscribe

Every marketing email we send carries a one-click unsubscribe link. You can also unsubscribe at any time via our unsubscribe page. Opt-out requests are honoured within 48 hours.

9. Security

We protect personal data with encryption in transit, restricted access, modern authentication and routine security reviews. We will notify affected users and authorities of any qualifying data incident within the time frames required by law.

10. Cookies

Our website uses a minimal set of essential and analytics cookies. We do not use third-party advertising cookies.

11. Changes

We may update this policy from time to time. Material changes will be communicated to subscribers and customers in advance.

12. Contact

Privacy questions: privacy@rabitflow.com. Everything else: hello@rabitflow.com.