Privacy policy

Last updated: August 21, 2026

What Rustle collects

When you sign in, we store your email address, account identifier, session records, purchased research reports, and payment status. If you use Google sign-in, Google provides your verified email address and a stable account identifier. Rustle never receives your Google password.

How we use it

We use this information only to authenticate you, process purchases, run the research you request, save your reports, prevent abuse, and operate the service. We do not sell personal information or use Google account data for advertising.

Service providers

Rustle uses Google for optional authentication, payment providers to process transactions, Cloudflare for hosting and storage, and data and model providers to produce requested research. Payment providers handle payment credentials under their own privacy policies.

Product analytics

We use privacy-conscious website and product analytics to understand acquisition sources, page performance, and whether flows such as sign-in, checkout, research, report viewing, and export work correctly. Analytics events do not contain your full research question, report text, source evidence, or email address. Signed-in activity is linked only with Rustle's internal account identifier. Page text, input values, and element attributes are masked in session replay.

Public report sharing

Reports are private to your account by default. Only when you explicitly enable sharing can anyone with the random share link view that report read-only. The public page does not include your email, account details, or payment records. You can disable sharing at any time, which invalidates the previous link.

Retention and requests

Account and report data is retained while your account remains active or as required for payments, fraud prevention, and legal obligations. You may request access or deletion by contacting the operator, Hangzhou Yituo Artificial Intelligence Co., Ltd., at difficultburger@gmail.com.