Privacy Policy

Last updated: June 19, 2026

Our philosophy: We built RTFT to protect people from companies that play fast and loose with their data. It would be deeply ironic — and wrong — for us to do the same. Here's exactly what we collect, why, and what we do with it.

1. What We Collect

Account Information

When you sign in with Google, we receive your name, email address, and profile picture. We use this to create your account and personalize your experience. We do not receive or store your Google password.

Analysis Data

When you submit a URL for analysis, we store the URL, the AI-generated analysis results, and the fact that you requested it. Completed analyses may appear on our public browse page.

Payment Information

Payments are processed by Stripe. We never see or store your full credit card number. We keep a record of your transaction history (what you bought, when, and how much) for accounting and support purposes.

Usage Data

We track basic usage metrics (pages visited, features used) via Google Analytics to understand how people use RTFT and improve the experience. This data is aggregated and not used to build individual profiles.

2. What We Don't Collect

We want to be explicit about what we don't do:

  • We don't sell your personal data. Period. Not to advertisers, data brokers, or anyone else.
  • We don't track you across the web.
  • We don't read the content of your Google account beyond the basic profile info needed to sign in.
  • We don't use your personal data to train our AI models.
  • We don't share your analysis history with third parties.

3. How We Use Your Data

  • To provide the service: Running analyses, managing your credits and subscription, and displaying your history.
  • To improve RTFT: Understanding which features are used helps us build a better product.
  • To communicate: We may email you about important account changes, security issues, or major product updates. We don't send marketing spam.
  • To prevent abuse: Monitoring for automated scraping, fraud, or other violations of our terms.

4. Who Has Access

  • Stripe processes your payments. Their privacy policy governs how they handle payment data.
  • Google handles authentication and provides analytics. Their privacy policy applies to their services.
  • Our AI provider processes the Terms of Service and Privacy Policy documents you submit for analysis. The content of these documents is publicly available anyway — we don't send them any of your personal data.
  • We don't share your personal information with anyone else unless legally required to do so.

5. Cookies

We use cookies for authentication (keeping you signed in) and analytics (understanding usage patterns). We don't use advertising cookies or tracking pixels from third-party ad networks. Your browser lets you control or delete cookies — but disabling them will prevent you from signing in.

6. Data Retention

  • Account data is retained as long as your account exists.
  • Analyses remain on the platform indefinitely to serve as a public resource (they don't contain your personal data beyond the association with your account).
  • Transaction records are kept for 7 years to comply with financial regulations.
  • Analytics data is retained according to Google Analytics' standard retention policies.

7. Your Rights

You have the right to:

  • Access your personal data — email us and we'll provide a copy.
  • Correct inaccurate data in your account.
  • Delete your account and associated personal data. Email us at the address below and we'll process your request within 30 days.
  • Export your analysis history.
  • Object to processing of your data for specific purposes.

These rights apply regardless of where you live. We believe everyone deserves strong privacy protections, not just residents of jurisdictions with specific privacy laws.

8. Data Security

We use industry-standard security measures including encrypted connections (HTTPS), secure authentication via OAuth, and regular security reviews. No system is perfectly secure, but we take reasonable precautions to protect your data.

9. Children's Privacy

RTFT is not directed at children under 13. We don't knowingly collect data from children. If you believe a child has created an account, contact us and we'll remove it.

10. Changes to This Policy

If we update this policy, we'll post the changes here with a new “last updated” date. For significant changes, we'll notify you via email or a prominent notice on the site.

11. Contact

Privacy questions or data requests? Reach us at [email protected]. We aim to respond within 48 hours.