Privacy Policy
This policy explains how Rangkum ("we", "us") handles information when a business uses the Rangkum application at rangkum.app. Rangkum is currently offered in early access to invited businesses. Questions: founder@rangkum.app.
1. Information we process
- Account information: username, a hashed password (we never store the password itself) and login times for people who use Rangkum.
- WhatsApp messages from WhatsApp accounts and groups that the business owns or manages and chooses to connect, either through WhatsApp's linked-device feature or by uploading chat-export files: message text, time, chat or group name, and the sender's display name and phone number. Photos, videos and other media files are not stored; we only record that a message contained media.
- Marketplace data from stores the business authorises through the marketplace's official authorisation flow (currently Shopee): orders, returns, products, reviews, buyer chat messages, payout and advertising figures.
- Content created in Rangkum: questions, AI answers, audit settings, reports and files the business creates or uploads.
- Usage records: AI usage (number of tokens and estimated cost) and basic server logs such as IP address and request time, used for security and troubleshooting.
2. How we use information
We use this information only to provide Rangkum to the business that connected it: storing and organising its data, answering its questions, running its audits and producing its reports, and keeping the service secure. We do not sell data and do not use it for advertising.
3. Read-only connections
Rangkum reads messages and store data. It does not send WhatsApp messages and does not change products, prices, stock or orders in a connected marketplace store.
4. AI processing
When a user asks a question or runs an audit, the relevant data selected by that user (for example, chosen groups and a date range) is sent to the AI model provider configured for that business to generate the answer. Supported providers currently include Anthropic (Claude), Alibaba Cloud Model Studio, Z.ai and OpenRouter. The provider processes the data under its own terms. We do not use your data to train AI models.
5. Separation of businesses
Each business's data is stored in its own database and can only be accessed by that business's accounts. Inside the application, a platform administrator can open a business only through a support session that requires a stated reason and is logged.
6. Storage and security
Rangkum runs on a cloud server in Singapore. Connections use HTTPS. Passwords are stored as one-way hashes. Access tokens for WhatsApp and marketplace connections are kept on the server and are never shown in the web page. Daily backups are made and kept for about 14 days.
7. Sharing
We share data only with: the AI provider described above; the providers that host our server; the platforms you connect (such as WhatsApp or Shopee) as part of the connection itself; and authorities when required by law.
8. Retention and deletion
Data is kept while the business uses Rangkum. Disconnecting a WhatsApp account or store stops new data from being collected. A business, or a person whose messages are stored, may ask us to delete data by emailing founder@rangkum.app; we will respond and delete it unless we are required by law to keep it.
9. Responsibilities of the business
A business that connects WhatsApp groups or chats is responsible for having the right to do so and for informing its staff and, where required, its customers that conversations may be analysed for operational purposes.
10. Cookies
The Rangkum application uses one essential session cookie per application address to keep you logged in. It is secure, not readable by scripts and expires after a period of inactivity. This public website does not use tracking or advertising cookies.
11. Changes
We may update this policy as Rangkum develops. The date at the top shows the latest version.
12. Contact
Rangkum · Surabaya, Indonesia · founder@rangkum.app