Last updated: June 26, 2026
This Policy explains what personal data Rearview collects, how we use it, and your rights. It covers our website and the Rearview application.
Account data: your email and workspace details when you sign up.
Customer Data: the change events and metadata we receive from the tools you connect (e.g. who made a change, when, and a description). You control which tools you connect.
Usage data: product analytics about how the Service is used (pages, key actions) to improve it. Waitlist/contact data: an email if you join the waitlist or request an integration.
Technical data: IP address and request metadata used for security and rate limiting.
To provide and operate the Service, authenticate you, answer your “what changed?” questions, send product and security notifications, prevent abuse, comply with law, and improve the product. We do not sell your personal data.
Where GDPR applies, we rely on: performance of a contract (to provide the Service), legitimate interests (security, product improvement), consent (non-essential cookies/marketing), and legal obligation.
We use vetted third parties to run the Service, which may process data on our behalf: hosting (e.g. Vercel), database/auth (e.g. Supabase/Neon), email (e.g. Resend), payments (Stripe), product analytics (e.g. Amplitude), and the AI model provider that powers the assistant (Anthropic). A current list is available on request.
We only send the AI model the minimal change context needed to answer a question, under token caps; we do not use Customer Data to train third-party models.
We keep Customer Data for as long as your workspace is active and for a limited period afterward to allow export, then delete or anonymize it. Account and billing records are kept as required by law.
We use industry-standard measures: encrypted transport, signed/verified webhooks, hashed authentication tokens at rest, rate limiting, and least-privilege access. No method is 100% secure, but we work to protect your data.
Depending on where you live, you may have rights to access, correct, delete, export, or object to processing of your personal data. Contact privacy@joinrearview.com and we’ll respond as required by law.
For Customer Data processed on behalf of a workspace, please direct requests to that workspace (the controller); we’ll assist them as a processor.
We may process data in countries other than yours. Where required, we use appropriate safeguards such as Standard Contractual Clauses.
Rearview is a workplace tool and is not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us personal data, contact privacy@joinrearview.com and we will delete it.
We use essential cookies to keep you signed in and, with your consent, analytics cookies to improve the product. You can change or withdraw your choice at any time via the “Cookie settings” link in the footer.
We may update this Policy; we’ll post the new version with an updated date. Contact: privacy@joinrearview.com.