Overview
RF1 Social Scrub is operated by Real Frequency, a U.S. company based in Delaware. We take your privacy seriously because we know our users are placing sensitive information in our care: information that affects your visa, your education, and your future. This policy explains what we collect, how we use it, how we protect it, and your rights.
What we collect
When you sign up, we collect your email address and the password hash you create. We do not collect your name, address, phone number, government ID, or financial information beyond what Stripe collects to process your payment.
When you upload a social media data export, we collect the contents of that file (posts, comments, likes, follows, and any other public profile data the platform included in your export). We never request permission to access your accounts directly. You give us a file. We read it.
When you use the audit, our system processes the contents of your uploads. Findings are stored in our database alongside your account.
We collect basic technical data (your IP address, browser type, and pages visited) for security and product improvement purposes.
How we use it
We use your uploaded data exclusively to run the audit and present your results. We do not sell, rent, share, or analyze your data for any purpose unrelated to your audit. We do not use your data to train AI models. We do not use it for advertising. We do not use it to build profiles of users for any third party.
How we protect it
Your data is encrypted in transit (TLS 1.3) and at rest (AES-256). Access to production systems is limited to authorized engineers under audit logging. We use Supabase as our database provider, which is SOC 2 Type II compliant. We use Vercel for hosting, which is also SOC 2 Type II compliant. Both providers operate U.S.-based infrastructure.
How long we keep it
We automatically delete your uploaded data exports, parsed content, audit findings, and any derived files 90 days after you upload them. Your account itself (your email and login) is retained so you can run future audits, until you ask us to delete it. You may request deletion at any time by emailing hello@rffi.in.
Your rights
You have the right to access your data, correct it, export it, and request its deletion. Email hello@rffi.in to make any of these requests. We will respond within 30 days.
Third parties
We use the following third-party services to operate this product: Stripe (payments), Supabase (database), Vercel (hosting), Resend (transactional email), Anthropic (AI model for audit reasoning). Each of these providers operates under their own privacy policies and data protection commitments. We share with them only what is necessary to deliver our service. Anthropic's API is used only to process audit content; per Anthropic's commercial terms, your data is not used to train their models.
Children
RF1 Social Scrub is intended for users 18 years or older. We do not knowingly collect data from anyone under 13. If you believe we have collected data from a child under 13, contact us at hello@rffi.in.
Changes to this policy
We may update this policy from time to time. Material changes will be announced via email to all active users at least 30 days before they take effect.
Contact
Questions about this policy: hello@rffi.in