Raabto acts in two ways when processing data: (i) as a controller of your personal information when you sign up, use our website, or interact with us; and (ii) as a processorwhen you use our platform to collect and manage your own customers’ data. If you wish to exercise privacy rights regarding data we process on behalf of one of our customers, please contact that customer directly.
Definitions
“Service Data” means data you or your authorized users submit to the platform, including contact records, lead information, messages, calendar events, and files. Service Data does not include account information, billing data, or usage analytics.
1. What Information We Collect
1.1 Information You Provide
When you create an account, subscribe, or contact us, we may collect:
- Name, email address, phone number, and company name
- Account credentials (email and password)
- Billing and payment information (processed through our secure payment provider — we do not store full card numbers)
- Information you provide in support requests, feedback, or surveys
- Authorization data when you connect third-party integrations such as Google Calendar, Facebook Lead Ads, or WhatsApp Business
The Raabto mobile app allows authenticated users to access their existing account using email and password. Accounts are created through our web platform.
1.2 Information We Collect Automatically
When you use our platform or visit our website, we automatically collect:
- Device and browser data: IP address, browser type, operating system, screen resolution
- Usage data: pages visited, features used, time on page, click patterns, referral URLs
- Log data: server access times, error logs, API request metadata
1.3 Information from Other Sources
- Lead data received through integrations you configure (e.g., Facebook Lead Ads, website forms)
- Calendar event data from Google Calendar when you connect your Google account
- Payment confirmation from our payment processor
1.4 Google API Services — Data We Access
When you connect your Google account to Raabto, we may access and process only the Google account information and Google Calendar data necessary to provide the Google Calendar features you enable in Raabto. This may include basic Google account information, such as your name, email address, and profile picture, and calendar event information needed to create, update, display, and manage events related to bookings and scheduling within the platform.
We use this Google user data only to provide and improve these user-facing Google Calendar features requested by you. We do not use Google user data for advertising, marketing, sale to third parties, profiling, or training generalized AI or machine learning models.
We retain Google user data only as long as necessary to provide the features you have enabled. When you disconnect your Google account or delete your Raabto account, we delete associated Google user data within 30 days, except where retention is required by law.
You can review and revoke Raabto’s access to your Google data at any time through your Google Account permissions page.
Raabto’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
1.5 Meta Platforms — WhatsApp Business and Facebook Lead Ads
When you connect Raabto to Meta services such as WhatsApp Business or Facebook Lead Ads, we process the messages, lead information, and account metadata you receive through these Meta services solely to deliver them to your Raabto account and enable the features you have configured.
We do not use Meta data for advertising, do not sell or share it with third parties for their independent purposes, and do not use it to train generalized AI models. You can disconnect Meta integrations at any time from your Raabto account settings.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain your account and platform features
- Provide optional AI-assisted writing features that help refine messages you compose
- Process billing, send invoices, and manage subscriptions
- Respond to support requests and provide technical assistance
- Analyze usage to improve platform performance and develop new features
- Detect, prevent, and address security threats, fraud, and abuse
- Send service-related notices and security alerts
- Send marketing communications in accordance with applicable anti-spam laws
- Comply with legal obligations
We do not use Service Data for any purpose other than providing the platform as directed by you.
2.1 AI Features
Raabto uses AI features powered by Anthropic (Claude) and OpenAI to help you refine messages you compose. These providers are prohibited under their API terms from using your content to train generalized AI models.
2.2 Use of Google User Data
Our use of Google user data is described in Section 1.4. We do not use Google user data for any purpose beyond what is stated there.
3. How We Share Your Information
3.1 Sharing Practices
We do not share personal information with third parties for their independent advertising purposes.
3.2 Google User Data — Sharing, Transfer, and Disclosure
We do not transfer or disclose your Google user data to third parties for purposes other than providing the Raabto platform services you have requested. The limited exceptions are:
- With your explicit consent (e.g., when you enable a specific integration that requires sharing data with another service)
- As required by applicable law, regulation, or legal process
- To our service providers who assist in operating the platform, subject to contractual obligations to protect your data and use it only on our behalf
We do not sell, rent, or trade Google user data. We do not use Google user data for advertising purposes. We do not share Google user data with data brokers or any third party for their independent use. All use of Google user data is limited to providing and improving the user-facing features of Raabto that are visible and apparent to you.
3.3 Service Providers
We work with trusted service providers for hosting, communications, payments, and analytics. These providers are contractually required to provide the same or equal protection of your data as stated in this privacy policy and may only use it to provide services on our behalf. Enterprise customers may request additional details through a Data Processing Agreement.
3.4 SMS, Voice, and Messaging Communications
When you use our SMS, voice, or messaging features:
- No mobile information will be shared with third parties or affiliates for marketing or promotional purposes
- Text messaging opt-in data and consent will not be shared with any third parties, except for aggregators and providers of the messaging services
- You are responsible for obtaining proper consent from your contacts before sending communications through Raabto
3.5 Legal Requirements
We may disclose information if we believe in good faith that it is necessary to comply with a law, regulation, or legal request; protect the safety of any person; address fraud or security issues; or protect our rights or property.
3.6 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction, subject to applicable law.
4. International Data Transfers
Raabto is based in Canada. Some of our third-party service providers may be located outside of Canada, including in the United States. When your personal information is transferred outside of Canada, we use contractual measures designed to provide a comparable level of protection in accordance with applicable Canadian privacy law. You acknowledge that data stored in other jurisdictions may be subject to lawful access requests by foreign authorities.
5. Cookies and Tracking Technologies
We use cookies and similar technologies necessary to operate the platform, maintain your session, and understand how the platform is used. Our analytics are first-party and do not build advertising profiles. We do not use third-party advertising or cross-site tracking cookies.
Raabto does not track you across other apps or websites. We do not use third-party advertising SDKs.
You can manage cookies through your browser settings. Disabling essential cookies may affect functionality.
6. Third-Party Links and Integrations
Our platform may contain links to or integrations with third-party services not operated by us. We are not responsible for the privacy practices of those services. We encourage you to review their privacy policies before sharing any personal information.
7. Data Retention
We keep your information only as long as necessary to provide our services and fulfill the purposes described in this policy, unless a longer retention period is required by law.
- Account data: Retained while your account is active and for a reasonable period after closure, then deleted or anonymized
- Service Data: You control it. Export or delete it anytime through the platform. Deleted within 90 days of account closure
- Google user data: Deleted within 30 days of disconnection or account closure (see Section 1.4)
- Billing records: Retained as required by Canadian tax regulations
- Usage and log data: Retained for a reasonable period, then purged or anonymized
- Backups: Encrypted backups may persist for a limited period after deletion from production
8. Security
We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption, access controls, authentication, and monitoring. Specific controls evolve as security best practices change.
While we use commercially reasonable efforts to secure the platform, no system is completely secure and we make no warranty that the platform will be uninterrupted, error-free, or impenetrable. You acknowledge that you provide personal information at your own risk.
In the event of a security breach, we will comply with applicable breach notification laws.
9. Your Privacy Rights and Choices
You have the following rights regarding your personal information, subject to applicable law:
- Access— Request a copy of the personal information we hold about you
- Correction— Request correction of inaccurate or incomplete data, or update it in your account settings
- Deletion— Request deletion of your personal information (subject to legal retention requirements)
- Data export— Request a copy of your data in a commonly used format
- Withdraw consent— Withdraw consent at any time. Withdrawing consent will not affect the lawfulness of any processing conducted prior to your withdrawal
- Non-discrimination— We will not discriminate against you for exercising any of your privacy rights
To make a request, email support@raabto.com with the subject “Privacy Request.” We respond to verified privacy requests within the timeframe required by applicable law.
To protect your personal information, we may need to verify your identity before processing your request. You may also designate an authorized agent to make a request on your behalf; we may require proof of authorization.
You can delete your Raabto account from within the mobile app or by emailing support@raabto.com.
If we process personal information on behalf of one of our customers and you wish to exercise your rights, please contact the customer directly. Where required by law, we will provide reasonable assistance to our customers in responding to end-user privacy requests.
10. Your Customers’ Data
When you use Raabto to manage your customers’ personal information, you are the controller of that data and we are the processor. We process Service Data only as instructed by you through the platform. Raabto does not monitor or review the content of Service Data.
You are solely responsible for:
- The lawfulness of all data you collect and process through the platform
- Obtaining and documenting consent from your end users before collecting their data
- Responding to all privacy requests, complaints, and regulator inquiries from your end users
- Maintaining your own privacy policy that accurately reflects your use of Raabto
- Notifying your end users of any breach affecting their data within your account
- Complying with all applicable privacy laws in your jurisdiction
Your obligations regarding end-user data, including any indemnification, are set out in our Terms of Service.
A formal Data Processing Agreement (DPA) is available to customers on our Business tier and above. Contact support@raabto.com to request one.
11. Children’s Privacy
Raabto is not intended for anyone under 18. We do not knowingly collect personal information from minors. If you believe we have, contact support@raabto.com.
12. Changes and How to Contact Us
12.1 Changes to This Policy
We may update this policy from time to time. We will post material changes to this policy on our website with a new effective date. For significant changes affecting how we use your data, we will provide notice through the platform or by email.
12.2 Contact Us
If you have questions about this Privacy Policy or want to exercise your privacy rights:
Email: support@raabto.com
Address: Brampton, Ontario, Canada