Privacy Policy

1. Introduction

Realm by Rook ("Company", "we", "us") operates Donum ("Service"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service.

2. Information We Collect

Account information

Name, email address, and password when you create an account.

Billing information

Payment details are processed securely by Paddle, our merchant of record. We do not store your full credit card number.

Connected data sources

When you connect third-party services (e.g., Stripe, HubSpot, Google Analytics), we access data from those services solely to generate your reports. We store connection tokens securely and only retrieve data necessary for report generation.

Usage data

We collect information about how you interact with the Service, including pages visited, features used, and device/browser information.

3. How We Use Your Information

• To provide, maintain, and improve the Service
• To generate and deliver your reports
• To process payments and manage subscriptions
• To communicate with you about your account, updates, and support
• To detect and prevent fraud or abuse
• To comply with legal obligations

4. Data Sharing

We do not sell your personal data. We share information only with:

• Paddle — our payment processor and merchant of record
• Infrastructure providers — for hosting and delivering the Service
• AI providers — to generate report content (data is processed, not stored by them)
• Legal authorities — when required by law

5. Data Retention

We retain your account data for as long as your account is active. Connected data source information is retained only as needed to generate reports. You can request deletion of your account and associated data at any time by contacting us.

6. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest, secure token storage for integrations, and access controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Cookies

We use essential cookies to maintain your session and preferences. We may use analytics cookies to understand how the Service is used. You can manage cookie preferences through your browser settings.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Data portability
• Withdraw consent at any time

To exercise these rights, contact us at the email below.

9. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Continued use after changes constitutes acceptance.

11. Contact

For privacy-related questions, contact us at laura@realmrook.com.