Privacy Policy

Effective: August 27, 2026 · Rip It Labs

This policy explains what PayRail collects, why, and your choices. We aim to collect the minimum needed to run the Service.

What We Collect

• Account info — your email and, if you sign in with Google, your Google profile email (via Google's verified token).
• Usage & action data — the requests you make (items, billers, amounts), spending limits you set, and a record of actions the agent took on your behalf.
• Payment info — handled by our payment processor (Stripe). We do not store your full card number; Stripe stores and tokenizes it.
• Delivery/biller details — the address, contact, or account number you provide to complete a purchase or payment.
• Technical data — session cookies, IP address, and basic logs for security and abuse prevention.

How We Use It

To operate the Service (carry out purchases/payments you authorize, find deals, enforce your spending caps), to bill subscriptions, to secure accounts and prevent fraud, and to support and improve the Service.

Who We Share It With

• Payment processor (Stripe) — to bill subscriptions and handle cards securely.
• Merchants, billers, and fulfillment/aggregator partners — only the details needed to complete an action you authorize (e.g., your delivery address to a store).
• AI provider (Anthropic) — request content is processed to power the agent's decisions.
• Blockchains — proof-of-action records are written to public blockchains and are permanent and publicly visible.

We do not sell your personal information.

Cookies

We use a session cookie to keep you logged in. Disabling it will prevent login.

Data Security

We use industry-standard measures (encryption in transit, restricted access, tokenized card handling via Stripe). No system is perfectly secure; use strong, unique credentials.

Data Retention

We keep account and action records while your account is active and as needed for legal, security, and accounting purposes. On-chain records are permanent and cannot be deleted. You may request deletion of your account data (subject to records we must retain).

Your Rights

You may access, correct, or request deletion of your personal data, and export your data, by contacting us. Depending on your location, you may have additional rights under laws such as the CCPA or GDPR.

Children

The Service is not intended for anyone under 18, and we do not knowingly collect data from minors.

Changes & Contact

We may update this policy; material changes will be posted here with a new date. Questions or requests: [email protected].