Privacy policy

Growth Optimize SL, based in Spain, operates Ramblo and is responsible for personal data used to manage your account and provide the service. Our registered address is Av. de la Pineda 2, 08860 Castelldefels, Barcelona, Spain. Our tax ID is B23991748.

For privacy questions or requests, email hello@ramblo.io. View company details.

• Account information: your name, email address, password hash, session records, and available sign-in security information such as IP address and browser details.
• Project content: project names, draft titles and captions, uploaded or imported images and videos, selected channels, and delivery results.
• Connection information: social account IDs and names, authorization scopes, access tokens, and expiry information. Assistant connections also include authorization grants and token records.
• Operational information: request details, errors, publishing responses, and support correspondence. Diagnostic logs can contain post content and social account identifiers; authentication credentials are redacted by the application logger.

We use this information to create and authenticate your account, keep projects separate, store and display drafts, connect accounts you authorize, publish posts you submit, troubleshoot errors, and answer support requests.

Providing the service and answering service requests is based on performing our agreement with you. Protecting accounts, investigating failures, and preventing misuse is based on our legitimate interests in operating a reliable, secure service. We process information to meet legal obligations where those apply. If we introduce an optional activity that requires consent, we will request that consent separately.

Account and connection information is necessary to use the corresponding features. You can browse these public pages without creating an account.

Our infrastructure providers process information to operate Ramblo: Vercel hosts the application, and Neon provides the configured database and private object storage. Their services can also process technical logs and maintain backups under their own contractual terms.

When you publish, the selected network—Meta for Facebook and Instagram, or LinkedIn—receives the caption and media needed to create the post. The resulting published content is subject to the network’s privacy settings and policies.

An assistant or automation provider you connect can access information from all your current and future projects exposed by the tools you authorize, including drafts and their media references. ChatGPT, Claude, and any automation or AI provider you choose have their own terms and privacy practices. Ramblo receives submitted drafts; it does not run an AI model to generate them itself.

Providers may process information outside Spain or the European Economic Area. The applicable locations and transfer arrangements depend on the provider and deployment configuration. Contact us for information about the arrangements applying to your data. We may also disclose information when legally required.

Draft media is stored privately. Authenticated users and authorized tools can receive access to it; temporary media URLs are also provided when necessary for delivery to social networks. Keep those URLs and your account tokens private.

Account and project records are kept while you use the service, until you delete the relevant content or request account deletion. Deleting a post removes its Ramblo record and associated stored media. If media removal fails, contact support so we can investigate. This does not delete posts already published on social networks.

Logs, support records, and provider backups may remain after active records are removed, according to their retention cycles or where needed to investigate an incident, meet legal obligations, or resolve a dispute. Contact us for details of the retention applicable to a specific request.

The application uses cookies necessary for sign-in, sessions, and connecting accounts. It also uses browser storage to remember your selected project and interface preferences. Our public pages do not add advertising trackers or analytics scripts. Hosting services may process technical request information to serve and protect the application.

Where applicable, you can request access to, correction of, deletion of, or portability of your personal data, and ask to restrict or object to processing. You can withdraw consent for processing based on consent, without affecting earlier lawful processing. We may need to verify your identity before acting on a request.

Send requests to hello@ramblo.io. You may also complain to your local supervisory authority; in Spain this is the Agencia Española de Protección de Datos.

Disconnect social accounts in your project’s Connections screen. Revoke assistant OAuth grants in MCP integration; rotate the account bearer token to invalidate clients using that token. These actions stop future access through those credentials but do not remove saved posts.

For account deletion and related data removal, follow the data deletion instructions. Account deletion is currently handled through support.

We update this page when the service or our practices change and revise the date above. Material changes will be communicated through the service or your account email where appropriate.