Privacy Policy
This policy explains what data RawMktg collects, why, how long we keep it and who else processes it. The data controller is Sageo Consulting LLP, TB3, Sowparnika Ananda, Sompura Gate, Sarjapur Road, Bangalore 562125, Karnataka, India.
1. What we collect
Account data
Your name, email address, hashed password (or your identity provider's identifier), and your organisation name. Collected because we cannot give you an account without it.
Websites you submit
The URLs you nominate, and the content of those pages — HTML, headings, text, structured
data and HTTP response headers. We fetch pages the way a search or AI crawler does. We do
not attempt to access pages behind a login, and we respect robots.txt.
Measurement data
The prompts you configure, the answers AI assistants return to them, and the brand mentions and citations we extract from those answers. Answers are stored verbatim so that historical results can be re-analysed when our extraction improves.
Billing data
We never see or store your card details. Payment is handled entirely by Paddle. We receive only a subscription identifier, the plan, its status and the renewal date.
Usage and technical data
Product analytics events (pages viewed, features used), error reports including stack traces, and standard server logs including IP address and user agent. Used to operate, secure and improve the Service.
2. What we do not do
- We do not sell personal data.
- We do not share your individual results with other customers.
- We do not use your data to train our own or third-party AI models.
- We do not run advertising or ad-tracking on the application.
3. Legal bases (UK/EU GDPR)
| Purpose | Basis |
|---|---|
| Providing the Service to you | Performance of a contract |
| Billing and tax compliance | Legal obligation and contract |
| Security, fraud prevention, error monitoring | Legitimate interests |
| Product analytics and improvement | Legitimate interests |
| Marketing email | Consent, withdrawable at any time |
4. Sub-processors
We use the following processors. Each is bound by a data processing agreement, and transfers outside your region rely on Standard Contractual Clauses or an adequacy decision.
| Processor | Purpose |
|---|---|
| Cloudflare | Application hosting, CDN, and storage of crawled pages and AI answers |
| Neon | Managed PostgreSQL database |
| Paddle | Payments, invoicing and tax — merchant of record |
| Resend | Transactional email |
| Sentry | Error monitoring |
| PostHog | Product analytics |
| Bright Data | Collecting AI assistant answers to your configured prompts |
| Anthropic | Extracting structured brand mentions from those answers |
Note on AI providers. We send your configured prompts — the buying questions you want measured — to AI assistants. We do not send your account data, your customers' data, or the content of your website to them for that purpose.
5. How long we keep it
- Account data — for the life of your account.
- Detailed page scores — 90 days, after which older partitions are dropped.
- Crawled pages and AI answers — for the life of your account, because historical measurements must remain re-analysable. Deleted when you delete your account.
- Billing records — retained as long as tax law requires, typically 6–7 years.
Deleting your account removes your organisation's data on our schedule. Backups age out within 30 days.
6. Your rights
Depending on where you live, you may have the right to access, correct, delete, port or restrict processing of your personal data, and to object to processing based on legitimate interests. You can delete your account from the application at any time. For anything else, email privacy@rawmktg.com and we will respond within 30 days.
If you are in the UK or EU and are unhappy with our response, you may complain to your local supervisory authority.
7. Cookies
We use cookies that are strictly necessary to keep you signed in and to protect against cross-site request forgery. We use first-party analytics cookies to understand product usage. We do not use advertising or cross-site tracking cookies.
8. Security
Data is encrypted in transit and at rest. Access to production data is limited to those who need it. Every query in the application is scoped to a single organisation so one customer's data cannot be returned to another. No system is perfectly secure; if a breach affects your personal data we will notify you and the relevant authority as the law requires.
9. Children
The Service is for business use and is not directed at anyone under 18. We do not knowingly collect data from children.
10. Changes
We may update this policy. Material changes will be notified by email or in the application before they take effect.
11. Contact
Sageo Consulting LLP, TB3, Sowparnika Ananda, Sompura Gate, Sarjapur Road, Bangalore 562125, Karnataka
privacy@rawmktg.com