Privacy Policy

• Account data — your email (Firebase Authentication), and, if you connect a social channel, OAuth tokens for that channel (currently Meta/Facebook/Instagram).
• Brand data you provide — business name, website URL, descriptions of what you sell and who you sell to, and any images you upload.
• Data we generate on your behalf — brand guides, marketing strategies, campaign copy, and AI-generated images/video, stored against your account.
• Usage/cost data— a record of each AI generation call (provider, model, and estimated cost) used to enforce your plan’s monthly generation budget.
• Connected-channel data— if you connect a Meta Page/Instagram account, we store the connection and use it to publish posts you’ve explicitly approved and scheduled.

We do not collect payment card data directly — billing (when live) is handled by Stripe, which has its own privacy policy.

• To generate your brand guide, strategy, and campaign assets.
• To publish approved, scheduled posts to your connected channels.
• To enforce per-account generation budgets (cost control) and, on paid plans, billing.
• To operate, secure, and improve the product.

We do not sell your data.

Generating content and publishing posts necessarily sends some of your data to the providers that do that work:

• AI generation providers(subject to change) — OpenAI, Ideogram, fal.ai (routing Kling/Hailuo/Luma Ray 2 video and Flux images), Recraft, Google (Gemini). Brand context and generation prompts are sent to these providers to produce copy/images/video.
• Meta(Facebook/Instagram) — if you connect a channel, we use Meta’s Graph API to publish approved posts and read basic Page/Instagram metrics on your behalf.
• Email— Resend, for transactional email.
• Email/CRM— Klaviyo, which stores your account email and product-usage milestones (e.g. whether you’ve created a brand, approved a guide) for internal analytics and segmentation. We only send you product update emails through Klaviyo if you’ve explicitly opted in — see “Your choices” below.
• Infrastructure— Firebase/Google Cloud Platform (database, file storage, authentication, hosting), Vercel (application hosting).
• Analytics— Google Analytics (GA4), to understand how rebbel.io and app.rebbel.io are used (page views, general usage patterns) — not your brand or campaign content.
• Billing(when live) — Stripe.

We do not share your data with third parties for their own marketing purposes.

Your brand, campaign, and account data is retained for as long as your account is active. If you request deletion, we’ll delete your data within 30 days.

• You control every publish — nothing goes to a connected channel without your explicit approval and scheduling action.
• You can disconnect a social channel at any time from the Rebbel dashboard.
• Product update emails are opt-in only — you’ll only receive them if you explicitly checked that box when connecting an AI assistant, and every email includes an unsubscribe link.
• To request account or data deletion, email support@rebbel.io — we’ll confirm and complete it within 30 days.

Rebbel is a business tool intended for users 18 and older. We do not knowingly collect data from children under 13, and if we learn we have, we’ll delete it.

We’ll post material changes to this page with a revised “Last updated” date above.

support@rebbel.io