Privacy Policy

1. Introduction

go.ramola.app ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By using go.ramola.app, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Account Information

When you register for an account, we collect:

• Email address - For account identification and communication
• Name - For personalization and account management
• Password - Securely hashed using bcrypt (we never store plain-text passwords)
• Account creation date - For account management

2.2 Link Data

When you create shortened links, we collect:

• Destination URLs - The URLs you want to shorten
• Short codes - Generated or custom short link identifiers
• Link metadata - Title, description, creation date
• App configurations - iOS/Android deep link settings
• Custom settings - QR codes, expiration dates, tags

2.3 Usage and Analytics Data

When someone clicks your shortened links, we collect:

• IP address - For geographic analytics and fraud prevention
• User agent - Browser and device information
• Referrer - Where the click originated from
• Timestamp - When the click occurred
• Device information - OS, browser, device type (mobile/desktop)
• Geolocation - Country and city (derived from IP address)

2.4 Billing and Payment Information

For paid subscriptions, we collect:

• Subscription tier - Your chosen plan
• Payment information - Processed securely by Stripe (we do not store credit card numbers)
• Billing history - Invoices and payment status
• Stripe customer ID - For payment processing

2.5 Automatically Collected Information

• Cookies - For authentication and session management
• Log data - Server logs including IP, timestamp, and requests
• API usage - Endpoint calls, request/response data (for paid API plans)

3. How We Use Your Information

3.1 Provide and Improve Services

• Create and manage your account
• Generate shortened URLs and deep links
• Route users to correct destinations (app or web)
• Provide analytics dashboards
• Process payments and manage subscriptions
• Enforce usage limits based on your plan
• Improve service performance and reliability

3.2 Communication

• Send account-related emails (password resets, security alerts)
• Send billing notifications (invoices, payment failures)
• Notify you of service updates or maintenance
• Respond to customer support inquiries
• Send marketing emails (only with your consent, with easy opt-out)

3.3 Security and Fraud Prevention

• Detect and prevent fraudulent activity
• Identify malicious links or abuse
• Protect against security threats
• Enforce our Terms of Service

3.4 Analytics and Research

• Analyze service usage patterns
• Generate aggregate statistics
• Improve features and user experience
• Develop new features

4. How We Share Your Information

4.1 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4.2 Service Providers

We share data with trusted third-party service providers who help us operate:

Provider	Purpose	Data Shared
Stripe	Payment processing	Email, name, payment info
AWS/Cloud Provider	Hosting and infrastructure	All service data
Email Service	Transactional emails	Email address, name

4.3 Legal Requirements

We may disclose your information if required by law, such as:

• Responding to subpoenas or court orders
• Complying with legal processes
• Protecting our rights, property, or safety
• Preventing fraud or illegal activity

4.4 Business Transfers

If we are acquired by or merged with another company, your information may be transferred as part of that transaction.

5. Data Retention

5.1 Account Data

We retain your account information as long as your account is active or as needed to provide services.

5.2 Link Data

Shortened links and their data are retained:

• Indefinitely for active links
• 90 days after expiration (for analytics)
• Until deleted by you

5.3 Analytics Data

Click and analytics data is retained for:

• 24 months for detailed click data
• Indefinitely for aggregated, anonymized statistics

5.4 Deleted Accounts

When you delete your account:

• Personal information is deleted within 30 days
• Links are deactivated immediately
• Aggregated, anonymized analytics may be retained
• Billing records are retained for 7 years (legal requirement)

6. Your Privacy Rights

6.1 Access and Portability

You have the right to:

• Access your personal data
• Export your data in a portable format (JSON/CSV)
• Request a copy of all data we hold about you

6.2 Correction and Update

You can update your account information at any time through your dashboard settings.

6.3 Deletion

You have the right to delete your account and associated data. Contact support@ramola.app or use the account deletion feature.

6.4 Marketing Opt-Out

You can opt out of marketing emails by clicking "Unsubscribe" in any marketing email or updating your preferences in account settings.

6.5 Do Not Track

Our service does not respond to Do Not Track signals, as we need to track clicks to provide our core analytics features.

7. Data Security

We implement industry-standard security measures to protect your data:

• Encryption - HTTPS/TLS for data in transit, encryption at rest for sensitive data
• Password Security - Bcrypt hashing with 12 rounds
• Access Controls - Role-based access, principle of least privilege
• Authentication - JWT tokens with 7-day expiry
• Infrastructure - Secure cloud hosting with regular security updates
• Monitoring - Automated threat detection and logging

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Cookies and Tracking

8.1 Essential Cookies

We use cookies necessary for service functionality:

• Authentication - JWT token storage for logged-in sessions
• Security - CSRF protection tokens
• Preferences - Dashboard settings, UI preferences

8.2 Analytics Cookies

We may use analytics cookies to understand how users interact with our service. You can disable these through browser settings.

8.3 Fingerprinting

For deferred deep linking, we create temporary device fingerprints using hashed combinations of IP address and user agent. These are stored for 24 hours and used only for routing users to the correct app.

9. Third-Party Links

Our service creates links to third-party websites and apps (Amazon, Instagram, TikTok, etc.). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

10. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

11. International Users

Our service is operated in the United States. If you access the service from outside the U.S., your information may be transferred to, stored, and processed in the U.S. By using the service, you consent to this transfer.

11.1 GDPR Rights (EU Users)

If you are in the European Union, you have additional rights under GDPR:

• Right to be informed
• Right of access
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object
• Rights related to automated decision-making

11.2 CCPA / CPRA Rights (California Residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know — What personal information we collect, use, disclose, and sell (we do not sell your data)
• Right to Delete — Request deletion of personal information we hold about you, subject to certain exceptions
• Right to Correct — Request correction of inaccurate personal information
• Right to Opt-Out of Sale / Sharing — We do not sell or share personal information for cross-context behavioral advertising
• Right to Limit Use of Sensitive Personal Information — We collect IP addresses and device fingerprints (for deferred deep linking) and UTM parameters. You may request we limit use of this sensitive data to strictly necessary purposes
• Right to Non-Discrimination — We will not discriminate against you for exercising any CCPA/CPRA rights
• Right to Data Portability — Receive a copy of your personal information in a portable format

To exercise your California privacy rights: Email privacy@ramola.app with the subject line "California Privacy Request." We will verify your identity and respond within 45 days (as required by CPRA). We do not require you to create an account to submit a request.

Data Breach Notification: In the event of a data breach affecting California residents, we will notify affected individuals within 72 hours of discovery as required by California law (Cal. Civ. Code § 1798.82).

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Sending an email to your registered address
• Posting a notice on our website
• Updating the "Last Updated" date at the top

Your continued use of the service after changes take effect constitutes acceptance of the new policy.

13. Contact Us

14. Your Consent

By using go.ramola.app, you consent to this Privacy Policy and agree to its terms.

Questions about privacy? Contact us at privacy@ramola.app. We're committed to protecting your privacy and will respond to inquiries within 30 days.