Privacy Policy

Overview

Rumo, Inc. (“Rumo”) provides operating software for professional tax firms. This Privacy Policy explains what we collect, how we use it, how we protect it, and the choices available to you. We design Rumo to collect the minimum information required to deliver the product.

Information we collect

Account information you provide (name, email, firm), product usage data (logins, feature use, device and browser metadata), and customer contentyour firm chooses to store inside Rumo, including workflow records, documents, and client communications.

How we use information

To operate and secure the Service, support customers, improve reliability, and meet legal obligations. We do not sell personal information. We do not use customer content to train third-party AI models.

Security

Data is encrypted in transit and at rest. Access is restricted through role-based permissions and audit logging. See our Security page for more.

Data retention

We retain personal information and customer content only for as long as reasonably necessary to provide the Service, meet legal and compliance obligations, protect the security and integrity of the platform, resolve disputes and enforce agreements, and honor customer-directed retention settings. Following termination of an account, customer content is retained for a limited period to allow export, then deleted from active systems. Backups age out on a rolling schedule. Certain records may be retained longer where required for legal, tax, audit, or security purposes.

Sensitive personal information

To the extent Rumo processes information that qualifies as sensitive personal information under California law, we use it only as reasonably necessary to provide the Service, to secure the platform and prevent fraud or abuse, to comply with legal obligations, or to support customer-directed workflows initiated by your firm. We do not use sensitive personal information to infer characteristics about you.

Data deletion

Firm administrators may request deletion of their firm's workspace by emailing support@rumopro.com. We complete verified deletion requests within a commercially reasonable period, excluding data we are required by law to retain.

Data access and correction

You may request access to, correction of, or a copy of personal information we hold about you by emailing support@rumopro.com. We may need to verify your identity before completing certain requests.

Your California privacy rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the following rights with respect to your personal information:

• The right to know what personal information we collect, use, disclose, and retain.
• The right to access a copy of the personal information we hold about you.
• The right to correct inaccurate personal information.
• The right to request deletion of personal information we have collected.
• The right to opt out of the sale or sharing of personal information.
• The right to limit the use and disclosure of sensitive personal information, where applicable.
• The right not to receive discriminatory treatment for exercising your privacy rights.

No sale or sharing. Rumo does not sell personal information, and Rumo does not share personal information for cross-context behavioral advertising. Because we do not engage in these activities, there is nothing for California residents to opt out of in this respect.

How to submit a California request. California residents may submit privacy requests by emailing support@rumopro.com with the words "California Privacy Request" in the subject line. We will verify your request using information reasonably necessary to confirm your identity, and we will respond within the timeframes required by California law. We will not discriminate against you for exercising your rights.

Authorized agents. California residents may designate an authorized agent to submit a request on their behalf. We may require the agent to provide written authorization signed by you, and we may separately verify your identity before completing the request.

Sub-processors

Rumo relies on a small number of vetted sub-processors to operate the Service (hosting, infrastructure, email delivery, and analytics). A current list of sub-processors is available on request from support@rumopro.com. We contractually require sub-processors to protect data consistent with this policy.

International users

Rumo is operated from the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States. Where required, we rely on appropriate safeguards for international data transfers.

Children

Rumo is designed for professional tax firms and is not directed to children under 13. We do not knowingly collect information from children.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated in the product or by email. The date at the top reflects the most recent update.

Contact

Questions about this policy or your data: support@rumopro.com.