Privacy Policy

    Last updated: 26 July 2026

    Welcome to Reuben AI, a platform purpose-built for private capital workflows. We are committed to protecting your privacy, securing your data, and being transparent about how our platform operates.

    This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your personal data. We comply with the Australian Privacy Act 1988 (Cth) and, where applicable, the General Data Protection Regulation (GDPR) for international users.

    1. Information We Collect

    Information You Provide

    • Account registration details: name, email, company name, phone number
    • Organization information: name, industry, investment focus areas
    • Fund details: fund names, size, strategy, geographic focus, investment stages
    • Deal data: company names, financials, stages, notes, tags, custom fields
    • Portfolio company information: performance metrics, board meeting notes, compliance records
    • Investment Committee data: memos, voting records, decisions, session notes
    • Documents: pitch decks, financial statements, contracts, due diligence materials
    • User-generated content: notes, comments, tags, custom analyses, feedback
    • Payment information: processed securely by third-party payment providers

    Information We Collect Automatically

    • Usage data: pages visited, features used, time spent, user flows
    • Session information: login and logout times, session duration, inactivity periods
    • Device information: browser type, operating system, IP address, device identifiers
    • Performance data: page load times, errors, crashes, API response times
    • Activity tracking: deal views, document uploads, analysis runs, note additions
    • Cookies and similar technologies: see our Cookie Policy for details
    • Log data: API calls, timestamps, actions performed, system events

    Information From Third-Party Sources

    • LinkedIn: company profiles, employee data, funding information, company updates
    • Crunchbase: company data, funding rounds, investors, founders, valuations
    • Perplexity: web research, market intelligence, competitive insights, news
    • Google Drive: documents you explicitly authorize us to access
    • Zapier and n8n: data from connected workflows, if you enable automation

    2. How We Use Your Information

    We use the information we collect for the following purposes:

    • Service Delivery: provide Reuben AI-powered deal analysis, portfolio management, and investment committee workflows
    • Reuben AI Processing: generate deal scores, summaries, competitive intelligence, market insights, and IC memos
    • Platform Improvement: analyze usage patterns, identify bugs, optimize performance
    • Security: detect fraud, prevent unauthorized access, monitor for abuse and policy violations
    • Communication: send transactional emails, service updates, security alerts, support responses
    • Compliance: meet legal obligations, enforce Terms of Service, respond to legal requests
    • Analytics: create aggregated, anonymized benchmarks and industry insights (with opt-out available)

    We Do Not

    • Train third-party models on your proprietary deal data without explicit consent
    • Share your confidential information with competitors
    • Sell your data to third parties
    • Use your data for advertising targeting
    • Share individual deal data with other customers

    3. Legal Basis for Processing

    Under the Australian Privacy Act and GDPR, we process your personal data based on the following legal grounds:

    • Performance of Contract: service delivery, account management, payment processing
    • Legitimate Interest: security, fraud prevention, platform improvement, analytics
    • Consent: marketing communications (where consent is required)
    • Legal Obligation: compliance with laws, responding to legal requests, tax reporting

    4. Reuben AI and Automated Decision-Making

    Reuben AI uses advanced intelligence, including large language models, to analyze deals, generate summaries, score opportunities, and provide investment committee memo sections. Reuben AI processes deal data, documents, external research, and your notes to produce outputs.

    Important Disclosures

    • No Fully Automated Decisions: all AI outputs are assistive tools. Human review and judgment are required for all investment decisions.
    • Accuracy Not Guaranteed: AI may produce errors, hallucinations, or outdated information.
    • Right to Human Review: you can always override or ignore AI recommendations.

    Training Data: we do not use your proprietary deal data to train third-party AI models without your explicit consent. We may use aggregated, anonymized data to improve our proprietary algorithms, with an option for you to opt out.

    5. Data Sharing and Disclosure

    Service Providers and Sub-Processors

    We share data with trusted third-party providers necessary to deliver our services:

    • Supabase: database hosting and infrastructure (US, AWS-based)
    • Large language model providers: AI analysis and text generation (US)
    • LinkedIn: company profile enrichment (US)
    • Crunchbase: company data and funding information (US)
    • Perplexity: web research and market intelligence (US)
    • Payment Processors: secure payment processing (location varies)
    • Email and Support Services: communication and customer support

    Other Disclosures

    • Within Your Organization: with users you invite to your account, based on their role permissions
    • With Your Consent: when you explicitly authorize data sharing
    • Legal Requirements: court orders, subpoenas, regulatory requests, law enforcement
    • Business Transfers: in the event of merger, acquisition, or asset sale (with advance notice)

    We Do Not Sell Data: Reuben AI does not sell your data or share it for marketing purposes.

    6. Data Retention

    We retain your data for different periods depending on the type and purpose:

    • Active Account Data: retained for the duration of your subscription plus 30 days after termination for data recovery
    • Deleted Account Data: 30-day recovery window, then permanently deleted
    • Backup Data: up to 90 days for disaster recovery purposes
    • Activity Logs: 90 days for security monitoring and debugging
    • Session Data: 30 days for analytics and performance monitoring
    • Financial Records: 7 years to comply with tax and accounting regulations
    • Aggregated Analytics: indefinitely, as this data is anonymized and non-identifiable

    You can request earlier deletion of your data, subject to legal obligations and legitimate business needs.

    7. International Data Transfers

    Reuben AI's infrastructure and third-party services may result in your data being transferred to and processed in countries outside your home country:

    • Primary Storage: Australia and United States (AWS via Supabase)
    • Processing: United States (large language model providers, LinkedIn, Crunchbase, Perplexity)

    We implement appropriate safeguards for international transfers, including Standard Contractual Clauses (SCCs) and vendor security commitments. For EU and UK users, data may be transferred to the United States under appropriate data protection frameworks and safeguards.

    8. Your Rights

    Under the Australian Privacy Act and GDPR, you have the following rights regarding your personal data:

    • Access: request a copy of your personal data
    • Correction: update inaccurate or incomplete information
    • Deletion: request erasure of your data (subject to legal obligations)
    • Portability: export your data in machine-readable format (CSV, JSON)
    • Objection: opt out of analytics or marketing communications
    • Restriction: limit processing in certain circumstances
    • Withdraw Consent: for processing based on consent
    • Complain: lodge a complaint with a data protection authority

    How to Exercise Your Rights

    • Email hello@goreuben.com with the subject "Data Subject Request"
    • Include your name, email, organization, and specific request
    • We will verify your identity and respond within 30 days

    Platform Tools: you can also export data or delete your account directly from Settings within the platform.

    9. Data Security

    We implement industry-standard security measures to protect your information:

    • Encryption: encryption in transit and at rest
    • Authentication: multi-factor authentication (MFA) available for all users
    • Access Control: role-based permissions with Row Level Security (RLS)
    • Monitoring: real-time security alerts and activity logging
    • Audits: regular security assessments
    • Backups: encrypted, geographically distributed backups

    Limitations: no system is 100% secure. You are responsible for maintaining the security of your login credentials and devices. We strongly recommend enabling MFA and using strong, unique passwords.

    If you suspect unauthorized access to your account, immediately contact hello@goreuben.com.

    10. Data Breach Notification

    In the event of a data breach that may affect your personal information:

    • We will investigate suspected breaches within 72 hours
    • Affected users will be notified without undue delay
    • Relevant authorities will be notified as legally required (e.g., OAIC in Australia, ICO in UK)
    • We will provide information on the breach scope, impact, and remediation steps

    Your Responsibilities: secure your credentials, enable MFA, and report suspicious activity immediately.

    11. Children's Privacy

    Reuben AI is a B2B professional platform not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors.

    If we discover that an account belongs to someone under 18, we will terminate it immediately. Parents or guardians can contact hello@goreuben.com to report underage use.

    12. Cookies and Tracking Technologies

    Reuben AI uses cookies and similar tracking technologies to provide and improve our services. These include:

    • Essential Cookies: required for authentication and session management (cannot be disabled)
    • Analytics Cookies: PostHog and similar tools to understand platform usage (can opt out)
    • Functional Cookies: remember preferences and feature settings (can opt out)

    For detailed information about the cookies we use and how to manage them, please review the categories listed above or contact us at hello@goreuben.com.

    13. Your Responsibilities

    As a Reuben AI user, you are responsible for:

    • Ensuring you have the rights to upload data to the platform
    • Complying with your own company's confidentiality and data protection policies
    • Avoiding unnecessary sensitive personal data (health records, government IDs, biometrics)
    • Obtaining appropriate consent from individuals whose data you input (e.g., founder personal information)
    • Using the platform ethically and lawfully

    14. Changes to This Policy

    We may update this Privacy Policy to reflect changes in our services, legal requirements, or business practices. Material changes will be communicated via email at least 30 days before they take effect.

    Minor updates will be posted with an updated "Last Updated" date at the top of this page. Continued use of Reuben AI after changes take effect constitutes acceptance of the updated policy.

    If you object to changes, you may terminate your account before they become effective.

    15. Contact Information

    For questions about this Privacy Policy, data subject requests, or general privacy inquiries:

    Email: hello@goreuben.com

    For data privacy matters, please use the subject line "Data Privacy Request" for faster routing.

    Response Time: we will respond to all inquiries within 30 days.

    Supervisory Authorities

    • Australia: Office of the Australian Information Commissioner (OAIC), www.oaic.gov.au
    • EU/UK: your relevant national data protection authority

    Reuben AI Chrome Extension Privacy Policy

    Last updated: 26 July 2026

    The Reuben AI Chrome extension is an authenticated companion to the Reuben AI web application at invest.goreuben.com. It exists to move data the signed-in user chooses to capture, such as deals, contacts, notes and page context, from third-party sites into the user's own Reuben AI workspace.

    What We Collect

    • Authentication: the extension reads the Supabase session that the user has already established by signing in to the Reuben AI web app, and mirrors it to chrome.storage.local so the extension can act on the user's behalf. No new credentials are created.
    • Page context: when the user invokes an action (Add deal, Add contact, Send tab, right-click Send to Reuben, or Save note), the extension reads the current tab's URL, page title and any highlighted text, and sends it to the user's Reuben AI workspace.
    • Contact and deal fields: names, emails, company names and other business fields entered by the user or extracted from the current page at the user's request.

    What We Do Not Collect

    • We do not collect browsing history.
    • We do not collect keystrokes, form input, or page content outside of user-invoked actions.
    • We do not collect location, health, financial account, or personal communication data.
    • We do not track users across sites for advertising.

    Where Data Goes

    All captured data is sent only to the user's own Reuben AI workspace (a Supabase project owned by the user's organization). We do not sell data. We do not share data with third parties. We do not use captured data to train models outside the user's workspace.

    Storage and Retention

    Session tokens and per-environment settings are stored in chrome.storage.local on the user's device. Uninstalling the extension removes them. Deleting the workspace account removes all captured data from Reuben AI servers per the main product's data retention policy.

    Contact

    Questions or requests: hello@goreuben.com.