This is a demo site.Purchase now

LogoRapidstack
Sign up

Privacy policy

Last updated: October 15, 2026

1. About this policy

Rapidstack (the "Service") is operated by Squared Sums Pte Ltd ("we", "us", "our"), which is responsible for your personal data as its controller.

This policy explains what personal data we collect, how we use it, who receives it, how long we keep it, and the rights you have over it. Section 11 explains how to reach us.

2. Information we collect

2.1 Information you give us

  • Account details: your email address, and your name and profile picture if you add them.
  • Content you create: the files you upload and your conversations with our AI assistant.
  • Payment details: your purchases, plan and billing details. Our payment processor handles your card, and card numbers never reach us.
  • Messages you send us: contact requests, bug reports and feature requests.
  • Preferences: your language, theme and marketing choices.

2.2 Information collected automatically

  • Usage information: the pages you visit and the features you use.
  • Technical data: your IP address, browser and device type, sign-in sessions, and error data.
  • Approximate location: the country your IP address points to.

2.3 Information from other sources

  • Our payment processor: your payment and subscription status.

You need an email address to create an account. Everything else you give us is optional.

3. How we use it

We use your information, and rely on these legal bases, to:

  • Provide the Service: run your account, store your files, answer your requests, process payments, and send you account emails. This is necessary to perform our contract with you.
  • Understand and improve the Service: learn how it is used, and show prices in your local currency. This is in our legitimate interests.
  • Keep the Service secure: prevent abuse, fraud and unauthorised access. This is in our legitimate interests.
  • Meet legal obligations, such as keeping accounting and tax records.
  • Send you product news and offers, only if you opt in. This relies on your consent, which you can withdraw at any time.

When you use our AI assistant, we send your messages to AI providers to generate a response. They process them only to return that response to us.

We do not sell your personal data, use it for advertising, or track you across other apps and websites. We make no decisions about you based solely on automated processing.

4. Who we share it with

We share personal data only as far as running the Service requires:

  • Service providers that process it on our behalf: AI providers, payment processing, email delivery, hosting and storage, location lookup, and analytics. They may use it only to provide their services to us, under terms that protect it at least as well as this policy does.
  • Authorities, advisers and buyers, where the law requires it, to protect our rights, or as part of a merger or sale of our business.

We and our service providers process data in Singapore, the United States and other countries. Where the law requires it, we protect these transfers with safeguards such as standard contractual clauses. Contact us for a copy.

5. Cookies and similar technologies

We use cookies and browser storage only to keep you signed in, keep the Service secure, and remember your preferences. Our analytics set no cookies and store nothing on your device, so we show no cookie banner. You can control cookies in your browser settings.

6. How long we keep it

We keep personal data only as long as we need it, and no longer than:

  • Account details, content and preferences: while your account exists, and up to 30 days after you delete it. You can delete files and conversations sooner yourself.
  • Payment details: 7 years after each payment, for accounting and tax purposes.
  • Messages you send us: 2 years after your last message.
  • Technical data: 60 days after you last use the Service.
  • Usage information and approximate location: our analytics keep no personal data, and we look up your location without storing it.

When a period ends, we delete the data.

7. Deleting your account

You can delete your account from your settings, or by emailing us. Deletion takes effect after 30 days, and you can cancel it until then. We then delete your account details, content and preferences. We keep your payment details, and the messages you sent through our contact form, for the periods in section 6.

8. How we protect it

We protect your personal data with measures that include:

  • Encryption in transit and at rest: all traffic to and from the Service is encrypted, and so is the data we store.
  • Passwordless sign-in: you sign in with a one-time code sent to your email, so there is no password to steal. Sign-in attempts are rate-limited, and sessions expire after 60 days without use.
  • Private file storage: your files are stored privately and shown only through short-lived, signed links.
  • Certified payment processing: your card is handled by a payment processor certified to PCI DSS, and its details never reach our servers.
  • Limited access: only the people and systems that need personal data to run the Service can access it.
  • Regular audits: we regularly audit the Service for security issues and fix what we find.

If a breach affects your personal data, we will notify you and the relevant authorities as the law requires.

9. Your rights

Depending on where you live, you have the right to:

  • access your personal data and get a copy of it;
  • correct it if it is inaccurate or incomplete;
  • have it deleted;
  • restrict how we use it;
  • object to how we use it based on our legitimate interests;
  • receive it in a portable format;
  • withdraw your consent at any time, without affecting what we did before;
  • complain to a data protection authority, such as the one where you live or work, or Singapore's Personal Data Protection Commission.

To exercise these rights, email us (section 11). We may ask you to confirm your identity first. We respond within one month, or tell you within that month if we need longer and why.

10. Children

The Service is not intended for anyone under 16, and we do not knowingly collect personal data from children under 16. If we learn that we have, we will delete it.

11. Contact us

For questions about this policy or your personal data, or to exercise your rights, email [email protected]. This address also reaches our data protection officer. You can also write to Squared Sums Pte Ltd, 160 Robinson Road, #14-04 SBF Centre, Singapore 068914.

12. Changes to this policy

We may update this policy. We will tell you about material changes in the Service or by email, and update the "Last updated" date above.