Privacy Policy

Effective: May 27, 2026 · Last updated: May 27, 2026

Who we are

Raw Me ("we", "us", "our") operates rawme.io — an AI-powered self-discovery product. We are based in Canada. This policy explains what personal data we collect, why we collect it, and your rights over it.

Questions? Email us at privacy@rawme.io.

What data we collect

We collect the minimum necessary to provide the service:

Email addressCollected by Stripe during checkout. Used to deliver your report and, if you abandon checkout, to send up to 3 follow-up emails.
Quiz answers15 multiple-choice responses (a–d). Used solely to generate your AI report. Never shared, never used for profiling outside your report.
Payment dataHandled entirely by Stripe. We never see, store, or process card numbers, CVVs, or bank details.
Session IDA random Stripe-generated identifier linking your payment to your report. Not personally identifiable on its own.
IP addressUsed by our rate-limiting service (Upstash) to prevent abuse. Never logged or stored by us.

Why we process your data (lawful basis)

Performance of contractGenerating and delivering your report after payment.
Legitimate interestSending up to 3 follow-up emails if you abandon checkout (you can unsubscribe instantly from any email).
Legal obligationRetaining payment records as required by Canadian tax law (PIPEDA / CRA requirements).

Who we share your data with

We do not sell your data. We share it only with the following processors, under data processing agreements, and only to the extent necessary:

All processors are required to handle your data in accordance with applicable law. Most are based in the United States; data transfers from the EU are covered under Standard Contractual Clauses (SCCs).

StripePayment processing. Privacy policy: stripe.com/privacy
OpenAIAI report generation (your quiz answers are sent to their API). Privacy policy: openai.com/privacy
NeonDatabase hosting (stores your session ID, email, and report). Privacy policy: neon.tech/privacy
ResendEmail delivery. Privacy policy: resend.com/privacy
UpstashRate limiting (stores IP addresses briefly). Privacy policy: upstash.com/privacy
VercelApplication hosting. Privacy policy: vercel.com/legal/privacy-policy

How long we keep your data

Report and emailRetained for 24 months, then automatically deleted.
Quiz answersRetained for 24 months as part of your report record, then deleted.
Payment recordsStripe retains these for 7 years as required by law. We cannot delete them from Stripe.

Your rights

Depending on where you live, you have some or all of the following rights:

We will respond to all requests within 30 days.

  • Accessrequest a copy of the data we hold about you.
  • Erasurerequest deletion of all your personal data (GDPR Art. 17, CCPA). Use the form at rawme.io/privacy#delete or email us.
  • Portabilityrequest your data in a machine-readable format.
  • Objectionopt out of follow-up emails at any time via the unsubscribe link in any email, or by emailing us.
  • Correctionrequest correction of inaccurate data.
  • Complaintlodge a complaint with your national data protection authority (e.g. the OPC in Canada, the ICO in the UK, your EU supervisory authority).

Staying in the loop

By using Raw Me, you agree that we may occasionally contact you about new features, products, or updates we think you'd genuinely find valuable — things built specifically for people like you, who've already invested in understanding themselves.

We send these sparingly. Every message includes a one-click unsubscribe link. You can also request removal at any time by emailing privacy@rawme.io or using the data deletion form below. We will never sell your address or use it for third-party advertising.

Cookies

We do not use tracking or advertising cookies. Stripe sets cookies on their own checkout pages as necessary to process payments — you can review Stripe's cookie policy at stripe.com/cookie-settings.

Children

Raw Me is not intended for anyone under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has submitted data, contact us at privacy@rawme.io and we will delete it promptly.

California residents (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect and how it is used, the right to delete your personal information, the right to opt out of the "sale" of personal information (we do not sell personal information), and the right to non-discrimination for exercising these rights.

To exercise your rights, email privacy@rawme.io.

EU / UK residents (GDPR / UK GDPR)

Our lawful bases for processing are set out above. For data transfers outside the EEA/UK, we rely on Standard Contractual Clauses. You have the right to lodge a complaint with your local supervisory authority.

Request data deletion

To permanently delete all personal data we hold about you, enter your email below. We will send a confirmation link to that address — only you can complete deletion by clicking it. Deletion is immediate and irreversible once confirmed.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated by updating the "Last updated" date at the top of this page. Continued use of the service after changes constitutes acceptance.