Privacy
Last updated 11 November 2026.
What we keep
Your name, email and a hashed password; your role, writing sample and topics if you add them; the drops, drafts and brand kit of your workspace; which drafts you shared and to which network; and click counts on your tracked links.
Clicks
When someone opens a tracked link we store the day and a salted one-way hash of their IP address and browser, so a person counts once a day. We do not store the IP address, and we never know who they are.
What we never do
We never ask for or store your social network passwords, never post on your behalf, and never sell personal data.
Who processes it
Rallypost runs on Cloudflare, and Cloudflare Turnstile checks sign-up for bots. To write drafts we send the drop, the brand kit and your voice profile (and, on the free tool, the text you enter there) to xAI (the Grok API), under its API terms. Our pages load their fonts from Google Fonts, which sees your IP address when it serves them. If your admin connects Slack, each new drop's headline and link go to that Slack channel. Paid plans are sold by Dodo Payments, our merchant of record: when an admin upgrades, Dodo receives their name and email, takes the card details on its own checkout page (we never see them) and keeps the billing record, and we keep only the Dodo customer and subscription ids. Nothing else leaves Rallypost.
Your choices
You can edit your profile and leave the team board at any time from My profile. A workspace admin can remove you from the workspace, after which your drafts and stats leave the team's results.
Cookies
One cookie keeps you signed in. No advertising or tracking cookies.