Privacy Policy

• Account data — your email (Firebase Authentication, including via Google or Apple sign-in), and, if you connect a social channel, OAuth tokens for that channel (currently Meta/Facebook/Instagram).
• Push notification token— if you use the Rebbel mobile app and allow notifications, a device push token (via Expo’s push notification service) so we can notify you when something needs your approval. You can disable this in your device’s notification settings at any time.
• Brand data you provide — business name, website URL, descriptions of what you sell and who you sell to, and any images you upload.
• Data we generate on your behalf — brand guides, marketing strategies, campaign copy, and AI-generated images/video, stored against your account.
• Usage/cost data— a record of each AI generation call (provider, model, and estimated cost) used to enforce your plan’s monthly generation budget.
• Connected-channel data— if you connect a Meta Page/Instagram account, we store the connection and use it to publish posts you’ve explicitly approved and scheduled.

We do not collect payment card data directly — billing (when live) is handled by Stripe, which has its own privacy policy.

• To generate your brand guide, strategy, and campaign assets.
• To publish approved, scheduled posts to your connected channels.
• To enforce per-account generation budgets (cost control) and, on paid plans, billing.
• To operate, secure, and improve the product.

We do not sell your data.

Generating content and publishing posts necessarily sends some of your data to the providers that do that work:

• AI generation providers(subject to change) — OpenAI, Ideogram, fal.ai (routing Kling/Hailuo/Luma Ray 2 video and Flux images), Recraft, Google (Gemini). Brand context and generation prompts are sent to these providers to produce copy/images/video.
• Meta(Facebook/Instagram) — if you connect a channel, we use Meta’s Graph API to publish approved posts and read basic Page/Instagram metrics on your behalf.
• Email— Resend, for transactional email.
• Email/CRM— Klaviyo, which stores your account email and product-usage milestones (e.g. whether you’ve created a brand, approved a guide) for internal analytics and segmentation. We only send you product update emails through Klaviyo if you’ve explicitly opted in — see “Your choices” below.
• Infrastructure— Firebase/Google Cloud Platform (database, file storage, authentication, hosting), Vercel (application hosting), Expo (push notification delivery for the mobile app).
• Analytics— Google Analytics (GA4), to understand how rebbel.io and app.rebbel.io are used (page views, general usage patterns) — not your brand or campaign content.
• Fonts— Google Fonts. When we show you what we found on your website during brand setup, your browser requests the fonts your site uses from Google’s font service (fonts.googleapis.com), which sees your IP address and the font names, but not your brand or campaign content. We ask that no referrer be sent with the request.
• Billing(when live) — Stripe.

We do not share your data with third parties for their own marketing purposes.

Your brand, campaign, and account data is retained for as long as your account is active. If you request deletion, we’ll delete your data within 30 days.

• You control every publish — nothing goes to a connected channel without your explicit approval and scheduling action.
• You can disconnect a social channel at any time from the Rebbel dashboard.
• Product update emails are opt-in only — you’ll only receive them if you explicitly checked that box (at sign-up or when connecting an AI assistant), and every email includes an unsubscribe link.
• To request account or data deletion, email support@rebbel.io — we’ll confirm and complete it within 30 days.

Rebbel is a business tool intended for users 18 and older. We do not knowingly collect data from children under 13, and if we learn we have, we’ll delete it.

We’ll post material changes to this page with a revised “Last updated” date above.

support@rebbel.io