Skip to main content
← Back to home

RSMatch Privacy Policy

Effective Date: March 5, 2026

RSMatch (“we,” “us,” or “our”) operates RSMatch, a web-based lead discovery and market-signal tool. This Privacy Policy explains what information we collect, how we use it, how we share it, and what rights you have. By using RSMatch, you agree to the practices described here.

1. What information we collect

We collect information in the following ways.

1.1 Information you provide directly

Account data. When you register or manage an account, we collect information such as your name, email address, and password (stored in hashed form). Depending on your configuration, we may also collect profile details you choose to add.

Billing and payment-related data. When you subscribe or pay for the Service, we collect billing details (e.g. billing email, address) and payment information. Payment card details are processed by Stripe; we do not store full card numbers. We may retain billing and transaction records as needed for accounting, tax, and dispute resolution.

Support and communications. When you contact us for support or other inquiries, we collect the content of your messages and any contact information you provide so we can respond and improve our support.

User inputs and saved content. We process the search queries you run, saved searches, and other content you create or store in the Service so we can provide the Service, personalize your experience where applicable, and improve our product.

1.2 Information we collect automatically

Usage data. We collect information about how you use the Service, such as features used, pages viewed, and actions taken. This helps us understand usage patterns, fix issues, and improve the Service.

Device, log, and browser data. We may collect device type, browser type and version, IP address, approximate location (e.g. country or region derived from IP), and similar technical data. Our servers also log requests (e.g. timestamps, URLs, referral sources) for security and operations.

Query and search activity. We log and process your search and query activity to deliver results, power features like recent runs and saved searches, and to improve the relevance and quality of the Service. This may include the terms you search for and how you interact with results.

1.3 Cookies and similar technologies

We use cookies and similar technologies (e.g. local storage) to keep you signed in, remember preferences, understand how the Service is used, and for security. We may use analytics technologies, including PostHog where enabled, to understand product usage and improve the Service. We do not use cookies for ad retargeting. You can control cookies through your browser or device settings; see “Cookies and tracking controls” below.

1.4 Public source content

Public source content. We process publicly available content from third-party platforms, such as thread URLs, titles, subreddit names, timestamps, and limited excerpts, to generate market-signal results. We aim to minimize personal data and focus on thread-level signals rather than personal profiles. We may temporarily cache limited public content for performance, reliability, and abuse prevention.

2. How we use data

We use the information we collect to:

  • Provide the Service — operate RSMatch, authenticate you, process your searches and saved searches, and deliver results and features.
  • Process payments — process subscriptions and payments and manage billing and renewals.
  • Support you — respond to inquiries, troubleshoot issues, and communicate with you about your account or the Service.
  • Improve the Service — analyze usage, fix bugs, develop new features, and improve performance and relevance (including using query and usage data in aggregated or anonymized form).
  • Security and compliance — protect the Service and our users, enforce our terms, and comply with legal obligations.
  • Communications — send you service-related messages (e.g. account or billing notices) and, where you have opted in or we have a lawful basis, product updates or marketing. You can opt out of marketing at any time.

Legal bases (where applicable). If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases for processing personal data, where relevant: performance of our contract with you; your consent; our legitimate interests (e.g. providing and improving the Service, security, analytics); and compliance with legal obligations.

Brazil (LGPD). Where the LGPD applies, we process personal data based on one or more legal bases, such as performance of a contract, compliance with legal obligations, consent where required, and legitimate interests, including operating and improving the Service and generating results from public source content. When we rely on legitimate interests, we seek to minimize personal data and focus on data reasonably necessary for those purposes.

3. How we share data

We do not sell your personal information. We share data only as described below.

3.1 Service providers and subprocessors

We use service providers who process personal data on our behalf to operate the Service. These include:

  • Infrastructure and hosting — providers that host our applications and store data.
  • Authentication — providers that help us manage sign-up, sign-in, and account security.
  • Billing and payments — Stripe and related services for processing payments and managing subscriptions.
  • Analytics — analytics providers such as PostHog, where enabled, to understand usage and improve the Service.
  • AI and machine-learning providers — providers that help us generate query plans, ranking, explanations, and similar product features.
  • Support and communications — tools we use to handle support tickets and communications.

A list of our subprocessors is available on request at hi@rsmatch.space. We require our subprocessors to protect personal data under contract and only use it for the purposes we specify.

3.2 Other sharing

We may share personal data:

  • With your consent — when you have given clear consent for a specific disclosure.
  • For legal reasons — when required by law, court order, or government request, or when we believe in good faith that disclosure is necessary to protect rights, safety, or property.
  • In connection with a transfer — if we are involved in a merger, acquisition, or sale of assets, we may share data with the relevant parties subject to confidentiality and this policy.
  • With affiliates — with affiliated entities that are under common control, for the purposes described in this policy.

We do not share your personal information with third parties for their own marketing purposes.

4. Data retention

We retain personal data only as long as necessary for the purposes described in this policy or as required by law. Retention periods depend on the type of data and the purpose:

  • Account data — for the duration of your account and for a reasonable period after closure for legal and support purposes.
  • Billing and transaction data — as required for tax, accounting, and dispute resolution (often several years).
  • Recent search runs and results — we store a limited set of your recent search runs, including queries and resulting leads, and automatically delete older runs.
  • Cached third-party content — stored briefly, typically for minutes, for performance, reliability, and abuse prevention.
  • Support communications — for the duration of the support request and for a period thereafter for quality and legal purposes.
  • Logs and technical data — 12 months for security and operations.

Specific retention periods are as described in this section; we delete or anonymize data when retention ends where feasible. After retention ends, we delete or anonymize the data where feasible.

5. Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These include access controls, encryption where appropriate, and regular review of our practices. No system is completely secure; we cannot guarantee absolute security and you use the Service at your own risk.

6. International transfers

RSMatch may be offered in the United States and other countries where the Service is used. If we transfer personal data to countries outside your country of residence (including outside the European Economic Area or the United Kingdom), we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission and the UK International Data Transfer Agreement where required. Details are available on request at hi@rsmatch.space.

For international transfers involving personal data originating in Brazil, we will apply transfer mechanisms recognized under the LGPD and ANPD guidance, such as standard contractual clauses or other approved mechanisms, where applicable.

7. Your rights

Depending on where you live, you may have the following rights:

  • Access — request a copy of the personal data we hold about you.
  • Correction — request correction of inaccurate or incomplete data.
  • Deletion — request deletion of your personal data, subject to legal and legitimate retention needs.
  • Portability — request a copy of your data in a structured, machine-readable format where technically feasible.
  • Objection — object to processing based on legitimate interests or for direct marketing.
  • Restriction — request restriction of processing in certain circumstances.
  • Withdrawal of consent — where we rely on consent, withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise these rights, contact us at hi@rsmatch.space. We will respond within the time required by applicable law (e.g. one month under GDPR). You may also have the right to lodge a complaint with a supervisory authority in your country.

7.1 Brazil (LGPD)

If you are in Brazil, you may have rights under the LGPD, including confirmation of whether we process your personal data, access to your personal data, correction, anonymization or deletion where applicable, information about sharing, portability where feasible, and revocation of consent where consent is the legal basis.

For LGPD access and confirmation requests, we will respond within the timing required by applicable law, including providing an immediate simplified response when possible and a fuller statement within 15 days where required. If you believe a decision affecting your interests was made solely through automated processing, you may request review of that decision where applicable. You may also contact the Autoridade Nacional de Protecao de Dados (ANPD).

8. California privacy rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and related laws, including the right to know what personal information we collect and how it is used and shared, the right to delete, and the right to correct. We do not sell personal information as defined under the CCPA. We do not share personal information for cross-context behavioral advertising in a way that qualifies as a “sale” or “share” under the CCPA. We do not use or disclose sensitive personal information for purposes beyond those permitted under the CCPA.

9. Cookies and tracking controls

We use cookies and similar technologies as described in “What information we collect.” You can control cookies through your browser settings (e.g. block or delete cookies). Some features may not work correctly if you disable certain cookies. Where we use analytics technologies such as PostHog, their policies may apply to their use of cookies and similar technologies. We do not use cookies for ad retargeting.

10. Children’s privacy

RSMatch is not intended for users under 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us at hi@rsmatch.space and we will delete it promptly.

11. Changes to this privacy policy

We may update this Privacy Policy from time to time. We will post the updated policy and change the “Effective Date.” For material changes, we will provide notice by email to the address associated with your account and/or by a prominent notice in the Service, at least 30 days before the change takes effect where reasonably practicable. Your continued use of the Service after the effective date constitutes acceptance of the updated policy. If you do not agree, you should stop using the Service and contact us regarding your data.

12. Contact details

For privacy-related requests, questions, or complaints:

  • Privacy contact: hi@rsmatch.space
  • General contact: hi@rsmatch.space
  • Address: Contact hi@rsmatch.space for mailing address.

For terms of service and general support, see our Terms of Service and contact hi@rsmatch.space.

*This Privacy Policy does not constitute legal advice. Consider having it reviewed by qualified counsel for your situation.*