Privacy Policy

1. Who we are

Racify ("Racify", "we", "us", "our") is operated by Michel El-Rassi trading as Racify, located at Beirut, Lebanon.

We operate the website racifyit.comand the Racify marketing strategy platform (the "Service"). We are the data controller for personal data processed through the Service.

For privacy-related questions or requests, contact us at: hello@racifyit.com

2. What data we collect

We collect the following categories of personal data:

• Account data: Your name and email address when you create an account, either directly or via Google OAuth.
• Questionnaire answers: Business information you provide when generating a marketing strategy (business name, industry, target audience, budget, goals, and similar). This content is entirely yours — we process it only to generate your strategy.
• Generated content: The marketing strategies, playbooks, and content produced by the Service on your behalf, stored under your account.
• Payment data: Billing records (amount, date, status) associated with your purchases or subscription. We do not store your card number or payment credentials — these are handled directly by our payment processor.
• Usage data: Technical logs including IP address, browser type, pages visited, and feature usage, collected automatically when you use the Service.
• Communications: Emails we send you (strategy ready notifications, receipts, product updates) and any messages you send to us.

3. How we use your data

We use your personal data for the following purposes:

• Providing the Service: Processing your questionnaire answers through our AI models to generate marketing strategies. Legal basis: performance of contract.
• Account management: Creating and maintaining your account, authenticating your identity, and managing your credits or subscription. Legal basis: performance of contract.
• Transactional emails: Sending you strategy-ready notifications, receipts, and account-related emails. Legal basis: performance of contract.
• Service improvement: Analysing aggregated, anonymised usage patterns to improve the quality and reliability of the Service. Legal basis: legitimate interests.
• Legal obligations: Retaining billing records to comply with tax and accounting requirements. Legal basis: legal obligation.
• Marketing updates: Sending you product news and updates if you have opted in. Legal basis: consent. You can unsubscribe at any time.

4. Third-party processors

We share your data with the following sub-processors to deliver the Service. Each processor is bound by a Data Processing Agreement and handles data only on our documented instructions.

AI processing note:Your questionnaire answers are sent to Anthropic's API to generate your strategy. Anthropic does not use API inputs to train its models. See Anthropic's Privacy Policy for details.

5. International data transfers

Some of our processors are located outside the European Economic Area (EEA), including in the United States. Where we transfer personal data outside the EEA, we rely on standard contractual clauses approved by the European Commission, or other appropriate transfer mechanisms, to ensure your data receives equivalent protection.

6. Data retention

We retain your personal data for as long as necessary to provide the Service:

• Account and playbook data: Retained while your account is active. Deleted within 30 days of an account deletion request.
• Billing records: Retained for 7 years to comply with tax and accounting obligations, even after account deletion.
• Server logs: Retained for up to 90 days, then automatically purged.

7. Your rights (GDPR)

If you are located in the EEA, UK, or another jurisdiction with similar data protection laws, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Ask us to correct inaccurate or incomplete data.
• Erasure: Request deletion of your personal data ("right to be forgotten").
• Portability: Receive your data in a structured, machine-readable format.
• Restriction: Ask us to restrict processing of your data in certain circumstances.
• Objection: Object to processing based on legitimate interests or for direct marketing.
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, email us at hello@racifyit.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

8. Cookies

Racify uses only strictly necessary cookies: a session cookie to keep you logged in and a CSRF token for security. We do not use advertising or tracking cookies, and we do not share cookie data with third parties for marketing purposes. No cookie consent banner is required for strictly necessary cookies under GDPR.

9. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted data transmission (HTTPS), access controls, and regular security reviews. No method of transmission over the internet is 100% secure, but we take the protection of your data seriously.

10. Children

The Service is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a notice in the Service at least 14 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact

For any privacy-related questions, data requests, or complaints, contact us at: