Privacy Policy

Last updated: June 24, 2026

This Privacy Policy describes how Sublime Dev, LLC (“we”, “us”, “our”) collects, uses, and protects your information when you use Ramble (“the Service”).

Who We Are

Ramble is operated by Sublime Dev, LLC, a Delaware limited liability company.

Contact: hello@ramble.md

Information We Collect

Account information. When you create an account, we collect basic account information such as your email address and name through your chosen sign-in method. We use this to identify your account and for essential communications.

Profile information. You may provide optional profile information, such as a display name and time zone. Your display name is visible to people you collaborate with.

Content you create. We store the documents you create, including their titles and text, and the workspaces you create or join, along with your membership and access permissions.

AI assistant interactions. If you use the AI assistant, we store your conversations with it, including the messages you send, the assistant’s responses, and the edits it proposes. The section “The AI Assistant” below explains how this information is processed.

Billing information. If you subscribe to a paid plan, our payment processor collects your payment details. We do not receive or store your full card number. See “Payments” below.

Collaboration information. If you invite someone to collaborate, we store the email address you provide so we can send the invitation.

The AI Assistant

Ramble includes an optional AI assistant that can help you write and edit. This section explains what happens to your information when you use it.

What is sent to our AI provider. When you send a message to the assistant, your message, the recent conversation, and the content of the documents you include as context are sent to our AI provider to generate a response. The provider routes the request to the underlying model that produces the response.

Web lookups. If you ask the assistant to look something up online, it sends a search query or web address to a search provider to retrieve results. It does not send your document content for this purpose.

What we store. We store your conversations with the assistant and the edits it proposes so you can return to them. We also record usage information, such as the model used and the amount of usage, to operate the feature and apply your plan limits.

Diagnostic records. To operate the assistant, investigate problems, and improve quality, we keep diagnostic records of AI interactions. These records can include your messages, the document content you provide to the assistant, and the assistant’s responses.

Training. We do not sell your content, and we do not use it to train our own models. When you use the assistant, your content is sent to our AI provider to generate responses for you and is handled under that provider’s terms.

How We Store Your Data

Your information is stored with cloud infrastructure providers that encrypt data at rest. This includes your account information, your documents, and your workspaces. Collaborative editing runs on real-time infrastructure, and browser storage on your device keeps local recovery data for documents you already have open. Data kept in your browser stays on your device and is transmitted only during normal sync.

Ramble supports collaboration, so some information is shared with the people you work with.

When you share a document or workspace, the people you give access to can see its content and your display name.
You control who has access and at what permission level.
A document is private until you choose to share it. You can share it with specific people, make it accessible to anyone with the link, or make it public.

Payments

Paid plans are processed by our payment processor, Stripe. When you subscribe or purchase AI credits, Stripe collects your payment details directly. We do not receive or store your full card number. We store records of your plan, transactions, and billing status, such as plan type, amounts, and the identifiers our payment processor assigns. We use this to provide paid features, apply usage, and handle refunds and disputes.

Cookies

We use essential cookies to keep you signed in, protect against cross-site request forgery, and return you to the right page after sign-in. Our product analytics also sets first-party cookies. We do not use cookies for advertising or third-party tracking.

Analytics

We use a product analytics service to understand how features are used and to improve reliability. These events are linked to your account through an internal identifier, not your email, and they never include your document content. We disable geolocation in our analytics and do not use session recording.

IP Address Handling

We do not store raw IP addresses. IP addresses are cryptographically hashed before any storage, and the hashed values are used only for rate limiting to prevent abuse. We cannot recover your actual IP address from the hash. For security and abuse prevention, our infrastructure may process a coarse, country-level signal derived from your connection. We do not collect precise location.

Logging

Our logs contain technical identifiers and metadata needed for security and debugging, such as request identifiers and resource IDs. We do not log document content, email addresses, or raw IP addresses.

Service Providers

We rely on a small number of third-party providers to operate the Service. They process information only to provide their service to us.

Cloudflare hosts our infrastructure and stores your account data and documents.
WorkOS handles sign-in and authentication.
OpenRouter provides access to the AI models used by the assistant and routes your assistant requests to the underlying model providers.
Firecrawl performs web search and retrieval when you ask the assistant to look something up.
Braintrust stores diagnostic records of AI interactions for debugging and quality monitoring.
Stripe processes payments for paid plans.
Resend sends transactional emails, such as collaboration invitations.
PostHog provides product analytics.
Sentry provides error monitoring.

Where Your Data Is Processed

Our providers are based primarily in the United States. By using the Service, you understand that your information may be processed in the United States and in other countries where our providers operate.

Data Retention

We keep your account information while your account is active, and we keep the documents and workspaces you create until you delete them.

When you delete a document, it moves to trash, where it remains recoverable for 30 days unless you permanently delete it sooner. After that, or when you delete it permanently, it is removed from our active systems. Copies in routine backups are removed during the normal backup rotation.

When you delete an AI conversation, or the document it belongs to, we remove the conversation from your account. Diagnostic records used for debugging and quality monitoring are kept for a limited period.

Operational logs are kept for a limited period for security and debugging.

If you want your account and its associated data deleted, contact us at hello@ramble.md.

Your Rights

You can access and export the documents you create, update your profile at any time, and request deletion of your account and associated data. To exercise these rights, contact us at hello@ramble.md.

Security

We use security measures including encryption in transit and at rest, secure cookies for authentication, rate limiting to prevent abuse, and access checks on every operation.

Changes to This Policy

We may update this policy from time to time. We will communicate significant changes by email or in-app notification. The “Last updated” date shows when the policy was last revised.

Contact Us

If you have questions about this Privacy Policy:

Email: hello@ramble.md

Sublime Dev, LLC San Francisco, CA