Privacy Policy

Grabbit provides Reddit monitoring, lead scoring, mention tracking, notifications, collaboration, and AI-assisted drafting tools.

For privacy questions or requests, contact us at sales@grabbit.sh.

• Account information, including your name, email address, profile image, authentication provider details, password credentials if you use email login, role, sessions, IP address, and user agent.
• Workspace and project information, including project names, descriptions, audience, problems, solutions, websites, logos, colors, collaborators, tags, keywords, feeds, settings, and scan status.
• Public Reddit information that the service scans or stores, including subreddit names, post and comment titles, bodies, authors, URLs, scores, timestamps, metadata, keyword matches, mention snippets, sentiment, relevancy scores, and reply records.
• Integration information, including Reddit usernames, connected account authorization records, Slack workspace and channel details, email alert recipients, Telegram chat IDs, and notification delivery history.
• Waitlist information, including email address and join timestamp.
• Payment and plan information if paid plans are enabled. Payment processors may collect billing details and card data. We do not store full card numbers.
• Technical information, including logs, rate-limit keys, queue events, cache entries, cookies, and similar data needed to secure and operate the service.

• Provide, secure, maintain, and improve the service.
• Authenticate users, manage sessions, enforce permissions, and prevent abuse.
• Scan public Reddit content, classify entries, detect mentions, match keywords, and rank leads.
• Generate AI-assisted suggestions, classifications, summaries, and draft content.
• Send product notifications through email, Slack, Telegram, and connected services.
• Process account deletion, collaboration invites, support requests, and administrative tasks.
• Send waitlist, newsletter, or product updates when you subscribe or otherwise consent.
• Comply with legal obligations, enforce our Terms, and protect rights, safety, and security.

Where GDPR or UK GDPR applies, we process personal information to perform our contract with you, pursue legitimate interests such as service security and product improvement, comply with legal obligations, and use consent where required for optional communications or integrations.

Grabbit may send project context, public Reddit content, prompts, and user-entered draft content to AI model providers to classify leads, verify mentions, suggest subreddits, and draft responses. Do not submit sensitive, regulated, or confidential information unless you have the right to process it through the service.

• Service providers that host infrastructure, databases, queues, storage, authentication, email delivery, AI processing, logging, security, billing, and support tools.
• Third-party integrations you connect, including Reddit, Slack, Telegram, email providers, and payment processors.
• Other users in your workspace when you invite collaborators or share project access.
• Public platforms when you choose to submit, reply, vote, or otherwise publish through a connected account.
• Authorities, courts, or third parties when required by law or needed to protect rights, safety, security, or the integrity of the service.
• A successor or buyer if we are involved in a merger, acquisition, financing, reorganization, or sale of assets.

We do not sell personal information or share it for cross-context behavioral advertising.

We use cookies and similar technologies for authentication, session management, security, preferences, and core product functionality. We do not use cookies for targeted advertising.

We keep personal information for as long as needed to provide the service, comply with law, resolve disputes, enforce agreements, and maintain security. Account deletion removes account data and associated project data where technically and legally required, subject to backups, audit logs, fraud prevention, legal holds, and public content already available on third-party platforms. Waitlist and newsletter data is kept until you unsubscribe or request deletion.

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to processing of personal information, and to withdraw consent where processing is based on consent. You can delete your account in account settings or contact us to make a request.

California residents may request to know, delete, correct, and receive equal service when exercising privacy rights. Because we do not sell personal information or share it for cross-context behavioral advertising, we do not offer a sale/share opt-out.

We use administrative, technical, and organizational safeguards designed to protect personal information. No system is perfectly secure, and you are responsible for protecting your account credentials and connected third-party accounts.

We may process and store information in countries other than where you live, including the United States. Where required, we use appropriate safeguards for cross-border transfers.

The service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

We may update this policy from time to time. If changes are material, we will provide notice through the service, by email, or by updating the effective date on this page.