Clear information abouthow data is handled.

1. Scope and our role

Rambl provides business tools that help sales teams capture, organize, and learn from customer conversations. This notice covers personal information processed through our public website, product experiences, support channels, and related business interactions.

The organization that provides your Rambl workspace—such as your employer or a company you work with—typically decides why and how workspace data is used. For that data, the organization is generally the controller or business, and Rambl acts as its processor or service provider under an agreement. Direct requests about workspace content should usually begin with that organization. We may redirect a request to it when appropriate.

This notice does not govern the independent privacy practices of customers, connected services, or third-party websites. Their notices apply to information they control.

2. Information we collect

Information you or your organization provides

• Account and profile information, such as name, business email, role, team, workspace, and authentication details.
• Customer and conversation content, which may include call audio, transcripts, summaries, notes, participants, topics, outcomes, and follow-up details when enabled by a customer.
• Business and CRM information, such as account, contact, opportunity, activity, ownership, and other records a customer chooses to connect with Rambl.
• Communications, including product inquiries, support messages, feedback, survey responses, and details shared during a business conversation.
• Transaction information, such as plan, billing contact, order, and payment status. Payment card details may be processed directly by a payment provider rather than stored by Rambl.

Information collected through use of the website and services

• Device and network information, including IP address, browser, operating system, device type, language, and approximate location derived from an IP address.
• Usage and diagnostic information, such as pages or product features viewed, actions taken, timestamps, referring pages, errors, performance data, and security events.
• Cookie and similar technology data, as described in the cookies section below.

Information from connected services and other sources

If a customer connects a CRM, calendar, calling platform, conferencing service, email provider, or another integration, Rambl may receive the records and metadata the customer authorizes that service to provide. We may also receive business contact information from referrals, event organizers, publicly available business sources, and service providers that help maintain accurate company and contact data.

3. How we use information

Depending on the context, we use personal information to:

• provide, configure, maintain, and support the website and services;
• process calls and customer-directed workflows, create conversation outputs, and connect activity with authorized systems;
• authenticate users and administer accounts, workspaces, and permissions;
• diagnose errors, monitor performance, develop features, and improve usability and service reliability;
• protect users, customers, Rambl, and the public by detecting misuse, fraud, security threats, and violations of applicable terms;
• answer inquiries, provide support, and communicate about service, security, or account matters;
• send product news or business communications where permitted, with available opt-out choices; and
• comply with law, enforce agreements, establish or defend legal claims, and complete corporate transactions.

4. Legal bases for processing

Where a law requires a legal basis, Rambl relies on one or more of the following, depending on the activity:

• Contract: processing needed to provide services or take steps at your request before entering a contract.
• Legitimate interests: operating and improving a secure business service, communicating with business users, and protecting our rights, balanced against the effects on individuals.
• Consent: where you make an optional choice and the law requires consent. You can withdraw consent prospectively.
• Legal obligation: processing needed to comply with applicable law or a binding legal request.

When Rambl processes workspace data only on a customer’s instructions, the customer determines the applicable legal basis for that processing.

5. How information is disclosed

We may disclose personal information in the following circumstances:

• Within a customer workspace. Administrators and authorized users may access information according to the customer’s settings, roles, and policies.
• To service providers. Vendors may help with hosting, infrastructure, communications, support, analytics, security, payments, and other operations. They are permitted to process information for the services they provide to us and subject to appropriate obligations.
• To connected services. At a customer’s direction, Rambl may send or receive information through an enabled integration. The recipient’s terms and privacy practices then apply to its copy.
• For legal and safety reasons. We may disclose information when we reasonably believe it is necessary to comply with law or legal process, protect rights and safety, investigate wrongdoing, or enforce agreements.
• During a business transaction. Information may be reviewed or transferred as part of a financing, merger, acquisition, reorganization, or sale of assets, subject to applicable confidentiality and notice requirements.
• With permission. We may disclose information when you or the customer directs us to do so.

We may also use and disclose information that has been aggregated or de-identified so it is not reasonably linked to an individual, subject to applicable law.

6. Cookies and analytics

Rambl and providers working on our behalf may use cookies, local storage, pixels, and similar technologies. These technologies can keep a session secure, remember preferences, understand website and product use, measure performance, and diagnose problems.

Browser controls can block or delete cookies, but disabling technologies needed for authentication, security, or core operation may cause parts of the website or services not to function. Where required, we provide a choice before using non-essential technologies. You can also use unsubscribe controls in marketing email; service and security messages may still be sent when necessary.

Some browsers offer a “Do Not Track” signal, for which there is not a uniform industry response. Where legally required and technically supported, we honor recognized opt-out preference signals for the browser and device sending them.

7. Data retention and security

Retention

We retain personal information for as long as reasonably necessary for the purpose for which it was collected, including to provide the services, follow customer instructions, maintain security and business records, resolve disputes, and meet legal or contractual obligations. Retention periods vary based on the type and sensitivity of information, workspace settings, the customer agreement, and legal requirements. Deletion from active systems may be followed by a limited period in protected backups before routine overwrite.

Security

We use administrative, technical, and organizational safeguards intended to protect personal information against unauthorized access, loss, alteration, or disclosure. No system or transmission can be guaranteed completely secure. Keep credentials confidential, use available account protections, and contact support@rambl.ai if you suspect unauthorized access.

8. International data transfers

Rambl and its providers may process information in countries other than the one in which it was collected. Privacy laws in those countries may differ. Where required, we use recognized transfer mechanisms and contractual protections for cross-border transfers, and customers may contact us for information about safeguards relevant to their service.

9. Your rights and choices

Depending on where you live and the context of processing, you may have rights to access, correct, delete, or receive a copy of personal information; object to or restrict certain processing; withdraw consent; or appeal a response. You may also have a right to complain to your local privacy or data protection authority.

To make a request about a Rambl workspace, contact the organization that provided the workspace first. You may also email support@rambl.ai. Please identify the workspace, the email associated with you, the right you wish to exercise, and the information involved. We may verify identity or authority before acting and may retain information where an exception applies. We will not discriminate against you for exercising an applicable privacy right.

An authorized agent may submit a request where local law permits. We may ask for proof of authorization and may need to verify the request directly with the individual. If a request is denied, our response will explain any available appeal path required by applicable law.

10. Other privacy information

Children

Rambl is a business service and is not directed to children under 16. We do not knowingly collect personal information from children under 16 through the website or services. If you believe a child has provided information, contact us so we can review and address it.

Third-party links and services

The website and services may link to or integrate with services Rambl does not control. Review the privacy terms of those services before providing information or enabling a connection.

Changes to this notice

We may update this Privacy Notice as our services, practices, or legal obligations change. We will post the revised version here and update the date above. If a change materially affects how we handle information, we will provide additional notice when required.

11. Contact us

Questions about this notice or Rambl’s privacy practices can be sent to support@rambl.ai. Include “Privacy” in the subject line and enough context for us to understand the request. Please do not email passwords, authentication codes, or unnecessary conversation content.