Privacy Policy

This Privacy Policy explains what personal data RabbitSync collects, why, what we do with it, who we share it with, how long we keep it, and the rights you have. It covers the website at rabbitsync.io, the RabbitSync application at app.rabbitsync.io, and our support channels (together, the "Service").

RabbitSync keeps data in sync between applications you connect, such as Notion and Google Sheets. We built it to pass your records through rather than keep them: record content is processed in memory while a sync runs, and our databases store what a sync needs to work, not the records themselves. Section 4 explains exactly what that means, including the one case where record content is held temporarily.

1. Who we are

The Service is provided by Chen Doytshman, a licensed dealer registered in Israel, of Tel Aviv, Israel ("RabbitSync", "we", "us" or "our").

For any question about privacy, or to exercise your rights, write to [email protected].

2. Our two roles

• We are the controller of the personal data we collect to run our business: your account, the website, support, billing records, security logs and product analytics. This policy describes that processing.
• We are a processor of the personal data inside the records you sync between your connected apps (for example, the names and email addresses in a Notion database of contacts). We process it only on your organization's instructions, under our Data Processing Addendum. If your personal data is in a dataset that one of our customers syncs, the customer decides how it is used; please contact them first, and we will help them respond.

3. What we collect, why, and our legal basis

Account and organization data. When you sign up, our sign-in provider Clerk collects your email address, and your name and profile picture if your sign-in method provides them (for example, signing in with Google). We keep a copy of these, plus the accounts (organizations) you belong to and your role in each. Why: to give you access to the Service and to the accounts you belong to. Basis: performance of our contract with you.

Your acceptance of our terms. When you accept our Terms of Service and acknowledge this Privacy Policy, we record which versions, when, the IP address and browser (user agent) you used, and how you signed up. We also record when we notified you of a change to them. Why: to show who agreed to what, if it is ever disputed. Basis: our legitimate interest in establishing and defending legal claims.

Connected apps. When you connect an app, we store the access granted by that app's provider (OAuth tokens, encrypted), and the identity of what you connected: the email address of the Google account, or the name and id of the Notion workspace. Why: to run the syncs you set up. Basis: contract.

Sync configurations and sync state. We store the syncs you configure: their names, the databases and sheets they connect, field mappings, schedules and settings. To keep two apps in sync without storing your records, we store record identifiers (which record on one side matches which on the other), one-way fingerprints (hashes) of record content that tell us whether a record changed, the names and types of fields, and the history of each run (when it ran, who started it, counts of records created, updated, deleted and failed, and error messages returned by the connected app). Why: to provide the Service. Basis: contract.

Support. When you contact us, through the console, by email to [email protected] or through the contact form on our website, we keep your messages, your email address and name if you give it, and the context you attach (such as which sync your question is about). Why: to answer you. Basis: contract, or our legitimate interest in answering enquiries from people who are not yet customers.

Notifications. We send in-app notifications and emails about your account, such as a failing sync, a plan limit or a billing matter, and record whether each email was delivered. Why: to keep you informed about the Service. Basis: contract. You can turn off the optional emails in the console; messages about your account's access, billing and changes to our terms cannot be turned off.

Billing. Subscriptions are sold by Lemon Squeezy (section 7). We receive and store only Lemon Squeezy's identifiers for your organization's customer record and subscription, the plan, its status and its dates. We never receive your card details. Why: to give your organization the plan it paid for. Basis: contract, and our legal obligations.

Usage of the Service. We record events about how the Service is used, such as signing up, connecting an app, creating a sync, a sync's outcome and a plan change, identified by your user id and your organization's id. These events never contain the content of your records, and never contain free text you typed. Why: to understand and improve the product. Basis: our legitimate interest in improving the Service; you can object at any time (section 10). Events about what you do in your browser (for example, which screens you use) are collected only if you opt in (section 6).

Security and server logs. Our servers log requests, including IP addresses, browser user agents, the time and the action requested. Why: to keep the Service secure, prevent abuse and fix problems. Basis: our legitimate interest in security.

Marketing emails. We send promotional and marketing emails, such as news about RabbitSync, new features and offers, only to people who have asked to receive them, and keep their addresses with Resend. Before RabbitSync opens, our website lets you leave your email address to hear when it does; we keep that address on our own systems and use it only to send you that one email, through Resend. Why: to tell you about RabbitSync. Basis: your consent. Every marketing email has a link to unsubscribe, and you can withdraw your consent at any time by using it or by emailing [email protected].

Website. Our website asks before it sets an analytics cookie; section 6 describes the choice and what happens either way. Our contact form, and the form for hearing when RabbitSync opens, use Cloudflare Turnstile to check that a person is submitting them. Basis: our legitimate interest in preventing spam.

We do not use your personal data to target advertising, we do not sell it, and we do not share it for cross-context behavioural advertising.

4. The data you sync

What passes through. When a sync runs, it reads records from one connected app, compares them with the other side, and writes the changes. The content of those records is processed in memory and is not stored in our databases. In its place we store the identifiers, fingerprints, field names and run history listed in section 3.

The one exception. When a sync runs for the first time, or when you ask for a full resync, our workflow engine records the records it is comparing as part of that run's history. This history is encrypted at rest, held in the European Union, and deleted automatically within 3 days after the run ends. We are changing the Service so that this no longer happens, and we will update this policy when it does.

Conflicts. When a record changed on both sides, we record which fields conflicted, never their values.

Your instructions. We process this data only to run the syncs you configured, on your organization's instructions under the Data Processing Addendum.

5. Google and Notion data

Google user data

When you connect a Google account, RabbitSync asks Google for these permissions:

How we use Google user data:

• We use it only to provide the sync features you set up and see in the console.
• We do not sell it, and we do not use it for advertising, for credit decisions, or to build profiles.
• We do not transfer it to others, except to provide the Service (through the sub-processors listed in section 7), to comply with the law, or as part of a merger or acquisition, with notice to you.
• Our people do not read it, except with your permission (for example, when you ask for help with a specific sync), when needed for security, to comply with the law, or when it has been aggregated and anonymized for internal operations.
• We do not use Google user data to develop, improve or train generalized or non-personalized AI or machine-learning models. The only Google data our AI features receive is the column names and types of the spreadsheets you sync (section 8).

RabbitSync's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, opens in a new tab, including the Limited Use requirements.

You can disconnect a Google account at any time in the console, or remove RabbitSync's access in your Google Account settings, opens in a new tab. Either one stops our access.

Notion data

When you connect Notion, you choose which pages and databases RabbitSync may access. We read and write only those, to run the syncs you set up, and we store the workspace's name and id. The same commitments apply as for Google data: no sale, no advertising, no reading by our people except as described above, and no use to train AI models. You can remove RabbitSync's access in the console or in Notion's settings under Connections.

6. Analytics, cookies and browser storage

The application. The console uses only the cookies our sign-in provider Clerk needs to keep you signed in, and stores a few settings in your browser (such as whether a side panel is collapsed, and which announcements you have dismissed). These are strictly necessary or set at your request, so we do not show a cookie banner.

Product analytics. We use PostHog, hosted in the European Union, through our own collector. No third-party analytics script runs in the console. Events from our servers are described in section 3. Events from your browser are sent only if you opt in, and we ask you once, in the console, unless your browser already sends a Global Privacy Control signal, which we honour without asking. To withdraw your consent later, email [email protected] and we will stop collecting your usage events and delete those we hold. If your browser sends a Global Privacy Control or Do Not Track signal, we do not collect browser events, whatever you chose. We derive only your country from your IP address, and the address is shortened before it leaves our servers, so PostHog never receives it in full.

The website. On your first visit, rabbitsync.io asks whether it may use an analytics cookie, with Accept and Reject as equal choices, and measures nothing until you answer. If you accept, PostHog, hosted in the European Union, sets a first-party cookie and uses your browser's storage so that your visits to the website can be recognised over time. If you reject, PostHog counts the visit without storing anything on your device, using a one-way hash of your IP address and browser that it computes on its servers with a value it discards every day. Either way, website analytics are never linked to your name, email address or RabbitSync account. If your browser sends a Global Privacy Control or Do Not Track signal, the website measures nothing and does not ask. Your choice is kept in a cookie for six months; you can change it at any time from "Cookie settings" at the bottom of every page, and withdrawing deletes the analytics cookie. Basis: your consent for the analytics cookie; our legitimate interest in counting visits without one.

7. Who we share data with

We use the service providers below (our "sub-processors") to run the Service. Each processes personal data only on our instructions, under a data processing agreement. The sub-processor list gives each one's purpose, the data involved and its location, and is kept current.

Lemon Squeezy sells our subscriptions as merchant of record. When you buy a subscription, Lemon Squeezy collects your payment and billing details as an independent controller, under its own privacy policy, opens in a new tab. It tells us your subscription's status, and never your card details.

Others. We may disclose personal data if the law requires it, to protect the rights, property or safety of RabbitSync, our customers or others, or as part of a merger, acquisition or sale of our business, in which case we will tell you before your data becomes subject to a different privacy policy.

8. AI features

Some features use AI models to make suggestions: which fields to map to each other, and which fields identify a record. To make a suggestion, we send the model provider (Anthropic or OpenAI) the names of the databases, sheets and fields involved and their types, never the content of your records. These providers process the data under terms that prohibit them from using it to train their models, and may keep it for a short period for abuse monitoring under those terms. We do not use your data to train AI models. AI suggestions are proposals that you review and apply; they are not decisions about people, and the Service makes no automated decisions that produce legal or similarly significant effects for anyone.

9. Where your data is processed

We host the Service on Amazon Web Services in the European Union. RabbitSync is run from Israel, which the European Commission and the United Kingdom recognize as providing an adequate level of data protection, so our access from Israel needs no additional safeguard. Some sub-processors are based in, or process data in, the United States and other countries; for example, support emails sent to us arrive through Resend's receiving service in the US. Where a country has no adequacy decision, the transfer is protected by the European Commission's Standard Contractual Clauses (with the UK addendum), or by the provider's certification under the EU-US Data Privacy Framework and its UK extension.

10. Your rights

Depending on where you live, you have rights over your personal data, including to:

• access it and receive a copy;
• correct it if it is inaccurate;
• delete it;
• restrict or object to our processing of it, including the product analytics based on our legitimate interest;
• receive it in a portable format;
• withdraw consent at any time where we rely on consent (such as browser analytics or marketing emails, by emailing [email protected], or for marketing emails through the unsubscribe link in each one), without affecting what was done before.

These rights come from the GDPR and the UK GDPR if you are in the European Economic Area or the United Kingdom, and from Israel's Privacy Protection Law, which gives you the right to inspect the information held about you and to ask for it to be corrected or deleted.

How to exercise them. Email [email protected], including to delete your user account. An admin can also delete an organization's account in the console's settings. We may need to confirm your identity first. We answer within one month; if a request is complex we may extend this by up to two more months and will tell you why. Exercising your rights is free.

California. If you live in California, the California Consumer Privacy Act gives you the right to know what personal information we collect, use and disclose; to delete and correct it; and not to be discriminated against for exercising these rights. In the last 12 months we collected the categories described in section 3: identifiers (such as email address, user id and IP address), internet activity (usage events and logs), commercial information (your plan and subscription status), and approximate location (country). We collected them from you, from our sign-in provider and from the apps you connect, for the purposes described in section 3, and disclosed them only to the service providers in section 7. We do not sell or share personal information, and we do not use sensitive personal information except to provide the Service. You can make a request yourself or through an authorized agent by emailing [email protected]; we will verify the request by confirming control of the account's email address.

11. Complaints

If you have a concern, please contact us first at [email protected] so we can try to resolve it. We acknowledge complaints within 30 days. You also have the right to complain to a data protection authority:

• in Israel, the Privacy Protection Authority, opens in a new tab;
• in the European Economic Area, the authority in the country where you live or work, or where you believe the problem arose (listed by the European Data Protection Board, opens in a new tab);
• in the United Kingdom, the Information Commissioner's Office, opens in a new tab.

12. How long we keep data

13. Security

We protect personal data with measures appropriate to the risk, including:

• encryption in transit (TLS) and at rest;
• separate envelope encryption for the access tokens of your connected apps;
• isolation of each organization's data in our database with row-level security;
• least-privilege access for our services and staff;
• we never store your password, because sign-in is handled by Clerk;
• redaction of tokens and secrets found in support emails.

No system is perfectly secure. If a breach of your personal data is likely to put you at risk, we will tell you and the relevant authorities as the law requires. Report a security issue to [email protected].

14. Children

The Service is not for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, contact [email protected] and we will delete it.

15. Changes to this policy

We update this policy when the Service or the law changes. If a change is material, we will tell you by email and in the console at least 30 days before it takes effect. Each version is published at rabbitsync.io/company/privacy-policy with its version and effective date, and earlier versions stay available there.

16. Contact

Chen Doytshman, Tel Aviv, Israel Privacy: [email protected] · Support: [email protected] · Security: [email protected]