Rumo Privacy Policy
Version 1.2 • Effective date: 31-05-2023 • Last updated: 26-05-2026
Rumo (formerly known as the Kaption Business Platform) is a product of Kaption AI, LLC ("we", "our", or "us"). We are committed to protecting your privacy and ensuring the confidentiality and security of your personal information.
This Privacy Policy outlines our practices for collecting, using, maintaining, and disclosing your information when you use Rumo. By accessing or using Rumo, you agree to this Privacy Policy.
Meta Platform & WhatsApp Business API
We are a "Tech Provider" as defined in the Meta Platform Terms and build apps that integrate with the WhatsApp Business API to provide services to our business customers. We process Meta Platform Data strictly on their behalf and in accordance with this Privacy Policy and the Meta Platform Terms.
Data We Collect & Store:
- Identifiers: WhatsApp phone numbers, user IDs, business account IDs
- Message content: Text messages, audio notes, voice messages, images, videos, documents
- Metadata: Message IDs, timestamps, delivery status, conversation types
🔒 Encrypted Message Storage
Platform stores business messages and conversations with encryption at rest.
- • All messages are encrypted when stored
- • Business conversation history is maintained
- • Secure access controls protect stored data
- • Regular security audits ensure data protection
How We Use This Data:
- Provide business messaging platform services
- Transcribe and summarize audio and messages
- Generate suggested replies
- Automate customer-care workflows
- Ensure service reliability and security
Important: We do not use Meta Platform Data for advertising, profiling, or sell/license this data.
Data Deletion:
To request deletion of your WhatsApp/Meta Platform Data:
- Email hey@kaptionai.com with subject "Meta Data Deletion"
- Include your business name, WhatsApp Business number, and specific data to delete
Website & Infrastructure
For our general platform services, we collect minimal information necessary to operate and improve our services.
Data We Collect:
- Technical Information: Device type, browser, operating system
- Usage Analytics: Anonymous usage data and trends
- Communication: Email when you contact us for support
- Billing: Payment information for premium services (processed securely)
How We Use This Data:
- Provide, maintain, and improve our services
- Monitor usage trends and optimize performance
- Respond to customer inquiries and provide support
- Comply with legal obligations
Data Security Standards
We implement industry-leading security practices to protect your information:
- Encryption: Data at rest is encrypted using AES-256 standards.
- Transmission: All data in transit is protected via TLS/SSL encryption.
- Access Control: Strict identity and access management protocols.
- Monitoring: 24/7 infrastructure monitoring and threat detection.
While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet is 100% secure.
Data Retention & Storage
Rumo stores business messages and conversations with encryption at rest. Data is retained for the duration of your subscription or until you request deletion, whichever comes first.
Upon account deletion or subscription cancellation, we will delete your data within 30 days, except where retention is required by law.
No Data Analysis Policy
We do not analyze, investigate, train, or test our AI models with your personal audio or chat conversations. Your privacy is our priority.
Third-Party Services
Our service may contain links to third-party websites. We are not responsible for their content, privacy policies, or practices.
🇪🇺 GDPR (European Union Users)
If you are located in the European Economic Area (EEA), you have certain data protection rights. Our legal basis for processing your data depends on the product:
- Contract: Processing necessary to provide Rumo.
- Legitimate Interest: Processing for security, fraud prevention, and service improvement.
- Consent: Processing where you have given explicit permission.
Your GDPR Rights:
- • Right to access, update, or delete your information
- • Right of rectification (correcting inaccurate data)
- • Right to object or restrict processing
- • Right to data portability
- • Right to withdraw consent at any time
🇺🇸 CCPA (California Users)
Under the California Consumer Privacy Act, California residents have the following rights:
- • Right to Know: Request disclosure of what personal data is collected.
- • Right to Delete: Request deletion of your personal data.
- • Right to Opt-Out: We do NOT sell your personal information to third parties.
- • Right to Non-Discrimination: You will not be denied service for exercising your privacy rights.
International Data Transfers
Your information may be transferred to, and maintained on, computers located outside of your state, province, or country where data protection laws may differ. By using our Service, you consent to this transfer. We use Standard Contractual Clauses (SCCs) and other approved mechanisms to ensure your data remains protected.
Meta Platform Compliance
This Privacy Policy is hosted at a public, accessible URL without geo-restrictions and is listed in our App settings. We only process Meta Platform Data as described here and for the purposes requested by our customers.
Data Breach Notification
In the event of a security breach that results in the unauthorized access, disclosure, or loss of personal data, Kaption AI, LLC will:
- Notify affected users without undue delay (typically within 72 hours for GDPR compliance).
- Provide information about the nature of the breach and recommended protective steps.
- Coordinate with relevant regulatory authorities as required by law.
Children's Privacy
Our Service is not intended for use by children under the age of 18. We do not knowingly collect personally identifiable information from children. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us so that we can take necessary actions.
Policy Updates
We may update this Privacy Policy from time to time. Changes are effective when posted on this page. You are advised to review this policy periodically.
Use of Cookies
Rumo uses cookies and similar tracking technologies to track activity on our service and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier.
Types of Cookies We Use:
- Essential Cookies: Necessary for the operation of our Service (e.g., authentication, security).
- Preference Cookies: Used to remember your preferences and various settings (e.g., language, theme).
- Analytics Cookies: Used to track information how the Service is used to make improvements.
Managing Cookies:
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.
For more information on how to manage cookies, visit your browser's help pages:
Get in Touch
If you have any questions or concerns about this Privacy Policy, please contact us:
Your Rights
- Request access to your personal data
- Correct inaccurate information
- Request deletion of your data
- Object to processing of your data
- Request data portability