Rebloq ("we", "us", or "our") operates the Rebloq web application (the "Service"), an analytics and scheduling platform for Tumblr creators. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our Service.
By creating an account or using the Service, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
Information You Provide
- Account information: Name, email address, and password (stored securely using one-way hashing) when you create an account.
- Tumblr authorization: When you connect your Tumblr account, we receive and store OAuth 1.0a access tokens that allow us to access your Tumblr data on your behalf. We never receive your Tumblr password.
- Support communications: Any messages you send to us via email or in-app support.
Tumblr Data
When you connect your Tumblr account, we sync the following data via the Tumblr API to provide analytics and scheduling features:
- Blog metadata (name, title, description, avatar)
- Posts and their engagement data (notes, likes, reblogs, replies)
- Follower counts
- Tags used on your posts
Payment Information
Payments are processed by Stripe. We do not store your credit card number or full payment details. We store only your Stripe customer ID and subscription metadata (plan type, billing period, subscription status) to manage your account.
Automatically Collected Information
- Server logs (IP address, browser type, operating system, referring URLs)
- Session cookies necessary to keep you signed in
- Usage data (pages visited, features used, timestamps) to improve the Service
2. How We Use Your Information
- Providing the Service: Syncing your Tumblr data, generating analytics, tracking engagement, and scheduling posts.
- AI post generation: If you use AI features, your prompts and relevant blog context (tags, recent topics) may be sent to a third-party AI provider to generate content. We do not use your data to train AI models.
- Payment processing: Managing your subscription, processing payments, and handling billing events through Stripe.
- Transactional emails: Sending account verification, password reset, and payment-related emails via Resend.
- Service improvement: Analyzing aggregated, anonymized usage patterns to improve features and performance.
- Security: Detecting and preventing fraud, abuse, and unauthorized access.
3. Data Sharing and Third-Party Services
We do not sell your personal information. We do not use your data for advertising or retargeting. We share data only with the following service providers as necessary to operate the Service:
- Tumblr API — to read your blog data and publish posts on your behalf
- Stripe — to process payments (receives your email and payment details)
- Resend — to deliver transactional emails (receives your email address)
- AI provider — to generate post content when you use AI features (receives your prompts and blog context)
- Hosting provider — to host and serve the application
4. Data Retention and Deletion
- Active accounts: Your data is retained for as long as your account is active and you maintain an active subscription.
- After cancellation: Your data is retained for 30 days after your subscription ends to allow for reactivation. After that, your account and associated data will be permanently deleted.
- Billing records: Payment records may be retained as required by tax and legal obligations.
- Deletion requests: You may request immediate deletion of your account and data at any time by contacting us.
5. Data Security
We take reasonable measures to protect your information, including:
- Encryption in transit via TLS/HTTPS
- Passwords stored using one-way cryptographic hashing
- OAuth tokens stored securely with restricted access
- Regular security reviews and updates
No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
6. Cookies
We use essential cookies to keep you signed in and maintain your session. We do not use advertising or third-party tracking cookies. You can disable cookies in your browser settings, but this may prevent you from using the Service.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate data.
- Deletion: Request deletion of your account and personal data.
- Portability: Request an export of your data in a portable format.
- Objection: Object to certain types of processing.
To exercise any of these rights, contact us at the email address below.
8. Children's Privacy
The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will promptly delete it.
9. International Data Transfers
Your data may be processed and stored on servers located in the United States. By using the Service, you consent to the transfer of your information to the United States and other jurisdictions where our service providers operate.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
11. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us at support@rebloq.app.