Privacy Policy
Effective date: June 2026
Rapprt Ltd, 124 City Road, London, EC1V 2NX
1. Who we are
Rapprt Ltd (“Rapprt”, “we”, “us”, “our”) is a private limited company incorporated in England and Wales. Rapprt provides the Rapprt web application and the Rapprt Outlook add-in, a B2B intelligence service that helps professionals prepare for conversations with their contacts. This privacy policy applies to both the Rapprt platform and the Rapprt Outlook add-in.
We are registered as a data controller with the Information Commissioner's Office (ICO). For any privacy-related queries, contact us at info@rapprt.com.
2. What data we collect and why
2.1 Account data (you provide this when signing up)
- Your name
- Your work email address
- Your company name
- Your password (stored in encrypted form; we never see your plain-text password)
We use this data to create and manage your Rapprt account, send you your weekly digest, and communicate with you about the service. The legal basis is the performance of a contract with you.
2.2 Contact data (you enter this about your customers)
When you use Rapprt you enter details about your professional contacts to receive briefings. This data is limited to:
- Contact first name and last name
- Contact's employer or company name
- Contact email address
- Sport, hobby, or interest (for example: ‘football’ or ‘cycling’)
- Specific team or focus within that interest (for example: ‘Hull City’)
We use your contact's email address solely to match them to meetings in your calendar. This lets the Rapprt Outlook add-in recognise when a tracked contact is in an upcoming meeting and show you a relevant brief ahead of that conversation. It is core to how the add-in works and is not used for any other purpose: we never email your contacts, and their email address is never shared with anyone outside Rapprt.
We do not collect contact phone numbers, home addresses, financial information, or any other personal data about your contacts. The contact data you enter is used solely to generate relevant briefings for you and to power this calendar matching.
Important: you are the data controller for the contact data you enter into Rapprt. Rapprt acts as your data processor. You are responsible for ensuring you have an appropriate lawful basis for storing this information. In most cases this will be legitimate interest, since you have an existing professional relationship with your contacts.
2.3 Usage data (collected automatically)
Note: this kind of usage tracking is planned but not yet active. We do not currently collect any of the data described below; this section describes what we intend to collect once built, so this policy does not need revisiting the day it ships.
- Pages and features you access within the platform
- Date and time of logins
- Email open data for your weekly digest (via a standard tracking pixel)
- Browser type and device type
Once active, we will use this data to improve the product, monitor reliability, and understand which features are most useful. The legal basis will be our legitimate interest in operating and improving the service.
2.4 Data we do not collect
We do not collect payment card details (these are handled by our payment processor), or sensitive personal data such as health information, political opinions, or religious beliefs.
3. How we use your data
3.1 To provide the Rapprt service: generating and delivering your weekly digest and dashboard briefings.
3.2 To send you service communications: account confirmations, digest emails, product updates. You cannot opt out of transactional emails while you hold an active account.
3.3 To improve the product: analysing usage patterns to prioritise features and fix issues.
3.4 To comply with legal obligations: responding to lawful requests from regulators or law enforcement.
We do not sell your data to third parties. We do not use your data for advertising purposes. We do not share your data with other Rapprt users.
4. AI processing
Rapprt uses a third-party AI service to generate the text of your contact briefings. The data passed to this service is limited to sport or hobby topic information (for example: ‘Hull City won 2-1 on Saturday’). We do not pass your name, your contacts' names, email addresses, or any other personal data to this service.
Your personal contact data is never included in any AI prompt.
5. Who we share data with
We share data only with trusted third-party service providers who process it on our behalf under data processing agreements:
- Hosting and infrastructure providers, to store and serve the platform
- Email delivery providers, to send your weekly digest
- AI model providers, to generate topic briefings (topic data only, no personal data)
- Sports data providers, to retrieve match results and sports news
- Payment processors, to handle subscription payments
Note: payment processing is planned but not yet active. We do not currently take payment for the service, so no payment data is shared with anyone at this time.
All third-party providers are required to handle your data in accordance with UK GDPR. We do not transfer your data outside the UK or EEA without appropriate safeguards in place.
6. How long we keep your data
We retain your account data and the contact data you enter for as long as your subscription remains active. After that, two different situations apply:
Cancellation. If your subscription lapses, or you cancel without asking us to delete your data, we keep your account and contact data for 12 months so you can reactivate without re-uploading everything. After 12 months it is deleted from our primary systems, with backups purged within a further 90 days.
Deletion. If you ask us to delete your data — using the in-app delete function or by making a right-to-erasure request — the 12-month grace period does not apply. Individual contacts are removed from our primary systems immediately, and a full account is deleted within 30 days, with backups purged within 90 days. You can delete your account at any time from your account settings.
Billing records are the one exception: we retain them for as long as required by UK statutory accounting obligations (typically six years), independent of account deletion. Full details of every category are set out in our Data Retention Policy.
Outlook add-in diagnostic event logs are automatically deleted after 90 days.
7. Your rights
Under UK GDPR you have the following rights:
- Right of access: to request a copy of the data we hold about you
- Right to rectification: to correct inaccurate data
- Right to erasure: to request deletion of your data
- Right to restriction: to limit how we process your data
- Right to portability: to receive your data in a portable format
- Right to object: to processing based on legitimate interest
To exercise any of these rights, contact us at info@rapprt.com. We will respond within 30 days. You also have the right to lodge a complaint with the ICO at ico.org.uk.
8. Cookies
Rapprt uses essential cookies only: those necessary to keep you logged in and the platform functioning. We do not use advertising cookies or third-party tracking cookies. You can disable cookies in your browser settings but this may affect your ability to use the platform.
9. Security
We take reasonable technical and organisational measures to protect your data including encrypted passwords, HTTPS throughout the platform, and restricted access to production systems. No system is completely secure and we cannot guarantee absolute security, but we will notify you and the ICO promptly in the event of a data breach that affects your rights.
10. Changes to this policy
We may update this privacy policy from time to time. We will notify you of material changes by email or by a notice within the platform. The current version is always available at rapprt.com/privacy.
11. Contact
Rapprt Ltd, 124 City Road, London, EC1V 2NX
rapprt.com