Privacy Policy
Last updated September 8, 2026
Rambll Inc. (“Rambll”, “we”, “us”) provides a content production service for healthcare clinics in Canada. This policy explains what personal information we collect, why, who we share it with, and the choices you have. It is written to meet the Personal Information Protection and Electronic Documents Act (PIPEDA) and substantially similar provincial private-sector privacy laws.
What we collect
- Account information — your name, email address, password (hashed), and, if you sign in with Google, your Google profile.
- Workspace information — your clinic name, website, address, services, conditions treated, brand voice notes and answers you give during onboarding.
- Team information — names, roles, credentials and photos of clinicians and staff that you add or that we read from your public website with your permission.
- Connected accounts — access tokens for services you connect (Google Search Console, Google Drive, Dropbox, Facebook, Instagram, LinkedIn). Tokens are encrypted at rest.
- Content — pages, posts, images and edits you create in Rambll, and their performance data.
- Usage and support — activity timestamps, audit events, and messages you send to support.
How we use it
- To provide the service: generate, schedule and publish content on your behalf.
- To email you about your account and your content (see Email and CASL).
- To bill you, support you, and keep the service secure.
- To produce anonymous, aggregated benchmarks (for example, median pages produced per clinic). Benchmarks never identify a clinic.
We do not sell personal information and we do not use your content to train AI models.
Who we share it with
We use the following service providers to run Rambll. Each receives only what it needs to perform its function, under contractual terms that restrict its use of the data.
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Database, authentication and file storage | All account and workspace data, including names, email addresses, encrypted connection tokens, clinic and staff photos, support attachments and audit logs. |
| Netlify | Application hosting and background jobs | All request data processed by the application. |
| Stripe | Subscription billing | Billing contact email, workspace identifier, payment and subscription details. Rambll never sees full card numbers. |
| Resend | Transactional and notification email | Recipient email addresses and the content of the emails we send you, including draft attachments and replies you send to support. |
| OpenRouter (routing to Anthropic and Google) | AI text and image generation | Your clinic website copy, brand voice, onboarding answers, clinician names and credentials, page drafts, and — when you enable reference photos — staff headshots and clinic images used to guide generated images. |
| FireCrawl | Reading your website during onboarding and team scans | Your public website URL and pages, including “About” and “Team” pages that may name staff and include their photos. |
| n8n | Content generation workflows | Workspace details, brand profile, onboarding answers, service and condition lists, and source page text. |
| Google (Sign-in, Search Console, Drive, Places) | Sign-in, search performance data, photo import and address lookup | Your Google account email and profile; read-only Search Console analytics for properties you connect; files you pick from Drive; clinic address queries. |
| Dropbox | Photo import and export | Files you choose to import or export. |
| Meta (Facebook and Instagram) | Publishing social posts and reading post insights | Page and account tokens, post content and images, and engagement metrics for posts published through Rambll. |
| Publishing social posts | Your member profile identifier and the post content you publish. | |
| PatientClicks | Publishing Google Business Profile posts for managed clinics | Approved post content and the clinic-to-profile mapping set by a Rambll administrator. |
Some providers process data outside Canada, principally in the United States. When they do, the data is subject to the laws of that jurisdiction. We also disclose personal information where the law requires it.
Google user data
Rambll’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Search Console data is used only to plan and report on your clinic’s content. Drive access is used only to import the files you pick and to save exports you request. We never sell Google user data, use it for advertising, or allow humans to read it except with your consent, for security, or as required by law.
AI-generated content and images
Content drafts and images are produced by AI models operated by our providers. When you enable reference photos, staff headshots and clinic images are sent to the image model so generated images resemble your real team and space. Only add photos of people who have agreed to be shown. Every draft is presented to you for review before it is published.
Cookies
Rambll uses only strictly necessary cookies: the session cookies that keep you signed in, and short-lived signed cookies used during invitations and administrative sessions. We do not use advertising or analytics cookies, and we do not load third-party trackers.
Email and CASL
We send account and service emails (receipts, password resets, drafts ready for review) and, with your consent given at signup, reminder and tip emails about your content. Every reminder email includes a one-click unsubscribe link, and you can change each email type in Settings → Email preferences. Unsubscribing stops all non-essential email; we still send the messages needed to operate your account.
Retention
We keep your data for as long as your workspace exists. Audit and security logs are kept for up to 24 months. Backups are retained for a limited period after deletion and then overwritten. Aggregated benchmark statistics contain no personal information and are kept indefinitely.
Deleting your data
A workspace owner can delete the workspace from Settings → Danger zone. This permanently removes the workspace, its content, connected-account tokens, uploaded photos, and the accounts of every member of that workspace, and cancels any active subscription. Deletion cannot be undone.
Access and correction
You can download a copy of your workspace data from Settings at any time. To ask what personal information we hold about you, to correct it, or to challenge our handling of it, email support@gorambll.com. We respond within 30 days. If you are not satisfied, you may complain to the Office of the Privacy Commissioner of Canada.
Security
Data is encrypted in transit and at rest. Connected-account tokens and sensitive notes are additionally encrypted at the field level. Access inside Rambll is restricted by workspace, and administrative access is logged. No system is perfectly secure; if we learn of a breach that creates a real risk of significant harm, we will notify you and the Privacy Commissioner as the law requires.
Children
Rambll is a business tool and is not directed at anyone under 18.
Changes to this policy
We will post any changes here and update the date at the top. Material changes will be announced in the app or by email before they take effect.
Governing law and contact
This policy is governed by the laws of Canada. Questions go to support@gorambll.com.