Rumi Social AI Privacy Policy

Effective date: October 2, 2026

This Privacy Policy explains how Rumi Social AI handles information when users create accounts, create content, and connect third-party social media and business services.

1. Information We Process

We may process account information, workspace and organization information, content created or uploaded by users, publishing information, usage information, and information made available by third-party services that users explicitly connect.

We record sign-in and sign-out times, recent activity times, the current workspace, and estimated active time in Rumi. Authorized platform administrators can view these records for account support, service administration, and security. Activity estimates use whether a Rumi tab is active and how recently it was used; they do not record the contents of keystrokes or activity on other websites.

2. Social Media Connections

When you connect services such as Instagram, YouTube, TikTok, Facebook, or other supported platforms, Rumi Social AI receives authorization credentials and account information necessary to provide the requested integration.

X (Twitter) connection and publishing

When you connect X, we retrieve your X account ID and username and store encrypted access and refresh tokens in your workspace. When you approve a post for X, we send its caption and selected photo or video to X, now or at your scheduled time. We retain the approved post settings, delivery status and returned post ID in your workspace’s publishing history. We do not retrieve direct messages or use X data to train AI models.

Disconnecting X in Settings removes the linked account information and stored tokens, cancels queued X posts, and attempts to revoke those tokens with X. If X cannot confirm revocation, we show a link to its connected-app settings so you can remove access there. Workspace administrators may also supply X app credentials, which are encrypted and retained separately for reconnecting. Contact rumi@rumiguitars.com to request deletion of saved app credentials.

3. How We Use Information

Information is used to provide the service, identify connected accounts, create and organize content, publish or schedule content at the user's direction, maintain account security, troubleshoot problems, and improve the service.

4. Authorization Credentials

Third-party authorization credentials are used only to provide requested integrations. Where supported by the service, authorization tokens are stored in encrypted form.

5. TikTok Data

When a user connects TikTok, Rumi Social AI may process TikTok account information and authorization credentials permitted by the scopes the user approves. TikTok information is used to identify the connected account and to support user-requested content publishing or upload functionality.

6. YouTube API Services and Data

Rumi Social AI uses YouTube API Services. When you authorize YouTube, we receive your channel ID and channel name and store encrypted access and refresh tokens. We use these to identify the channel you authorized and upload videos only when you select a file, review its metadata and visibility, and confirm the upload. We do not collect your Google password.

We send your selected video, title, description, visibility and content declarations to Google/YouTube. Video chunks pass through our hosting service to YouTube; the uploader does not save a copy of your video file in our database. We store upload metadata and the returned video ID, visibility and processing status in your workspace for up to 30 days. Workspace members authorized by you can view that upload history. We do not use YouTube API data to train AI models or sell it to advertisers.

Google handles information under the Google Privacy Policy. Our hosting and database providers process information as necessary to operate the integration. We use session cookies to sign you in and browser session storage to resume an upload; this stores file metadata and upload details, not your Google password or authorization tokens.

In Settings, choose “Disconnect YouTube and delete data” to revoke access and immediately delete the connected channel information, stored tokens and upload history from Rumi Social AI. This does not delete videos already uploaded to YouTube. Manage those videos in YouTube Studio. You can also revoke access through Google security settings. We periodically check authorization and delete stored YouTube data when Google reports that the authorization is invalid. You can contactrumi@rumiguitars.com for privacy questions or deletion requests.

7. Sharing of Information

We do not sell users' personal information. Information may be transmitted to connected third-party services when necessary to perform actions requested by the user.

When you generate campaign photos, we send the new photo, its post and brand context, and up to three recent photos from the same campaign to OpenAI for a visual quality review. We save the review result and any replacement photo in your workspace. This review helps assess relevance, mood, variety and visible image problems; you remain responsible for reviewing and approving posts before publishing.

When you request AI video generation, we send your selected image and motion prompt to Runway. We retain the prompt, generation status and completed video in your workspace. Completed videos are stored in private Vercel Blob storage and require workspace access to view or download. You can contact rumi@rumiguitars.com to request deletion.

8. Data Retention and Account Disconnection

Information is retained as reasonably necessary to provide the service, maintain security, comply with applicable obligations, and resolve technical issues. Users may revoke access through the applicable third-party service. Rumi Social AI may also provide connection management or disconnection controls.

9. Security

We use reasonable technical and organizational safeguards designed to protect account and authorization information. No online service can guarantee absolute security.

10. Third-Party Services

Third-party platforms maintain their own privacy policies and practices. Rumi Social AI does not control those independent services.

11. Changes to This Policy

We may update this Privacy Policy as the service, integrations, or applicable requirements change.

12. Contact

Privacy questions or deletion requests may be sent torumi@rumiguitars.com.