Privacy Policy

Your privacy is important to us. This policy explains how Varum collects, uses, and protects your personal information.

Last Updated: October 24, 2026

Introduction

Welcome to Varum, operated by Digital Rodeo Group LLC ("we," "us," or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it. If you have any questions or concerns about this policy, please contact us at support@varum.app.

Information We Collect

Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:

• Register for an account
• Create or modify your user profile
• Submit marketing requests or projects
• Upload files or content to the platform
• Communicate with us or other users
• Subscribe to our newsletter or marketing communications

The personal information we collect may include:

• Contact Information: Name, email address, phone number, company name
• Account Credentials: Username, password, and authentication information
• Profile Information: Job title, department, role, profile picture
• Payment Information: Billing address, credit card information (processed securely through third-party payment processors)
• Content: Marketing requests, project details, comments, files, and other content you create or upload

Information Automatically Collected

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, time spent on platform, click patterns
• Cookies and Tracking Technologies: Session cookies, analytics cookies, and similar technologies

Information from Third-Party Sources

If you choose to authenticate using third-party services (Google, Microsoft, Apple), we receive basic profile information from those services in accordance with their privacy policies and your authorization. If you connect an integration (for example, Google Drive), we receive only the data you have explicitly granted access to through that service's OAuth consent screen.

How We Use Your Information

• Service Delivery: To provide, operate, and maintain our platform and services
• Account Management: To create and manage your user account and authenticate users
• Communication: To send you notifications, updates, and respond to your inquiries
• Collaboration: To enable team collaboration features, task assignments, and file sharing
• AI Features: To provide AI-powered content generation and assistance features within the user's own workspace
• Analytics: To analyze usage patterns and improve our platform performance
• Security: To detect, prevent, and address security incidents and fraudulent activity
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Marketing: With your consent, to send promotional materials and product updates

Google Workspace API Services — Limited Use and AI Disclosure

Varum's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, when you connect a Google Workspace product (such as Google Drive) to Varum:

• We access only the data covered by the scopes you explicitly grant on the Google OAuth consent screen.
• Google Workspace data is used solely to provide and improve user-facing features of Varum (for example, letting you browse and attach Drive files to marketing projects).
• We do not use your Google Workspace data, including files, metadata, or any content accessed via Google APIs, to train, develop, or improve any generalized or third-party AI or ML models.
• We do not transfer your Google Workspace data to third parties except as necessary to provide or improve these user-facing features, comply with applicable law, or as part of a merger, acquisition, or asset sale (subject to this policy).
• Humans (including Varum employees) do not read your Google Workspace data unless we have your affirmative agreement for specific pieces of data, it is necessary for security purposes (such as investigating abuse), or it is required by law or for compliance purposes.

How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Within Your Organization: With other members of your tenant/workspace for collaboration purposes
• Service Providers: With third-party vendors who perform services on our behalf (hosting, analytics, payment processing, email delivery)
• AI Service Providers: Content you submit to AI features may be processed by OpenAI in accordance with their privacy policy and data-processing terms. Content accessed through connected Google Workspace integrations is NEVER passed to third-party AI services.
• Legal Requirements: When required by law, subpoena, or court order
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize us to share your information

Data Security

• Encryption: Data is encrypted in transit using SSL/TLS and at rest
• Access Controls: Role-based access controls and tenant isolation ensure data separation
• Authentication: Secure password hashing, SSO, and multi-factor authentication options
• Infrastructure: Our platform is hosted on secure cloud infrastructure (AWS, Firebase)
• Monitoring: Regular security audits and monitoring for suspicious activity

While we take reasonable measures to protect your information, no security system is impenetrable. We cannot guarantee the absolute security of your data.

Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. When you delete your account or disconnect a third-party integration, we will delete or anonymize the associated personal information and OAuth tokens within a reasonable timeframe, unless we are required to retain it for legal, regulatory, or legitimate business purposes.

Your Privacy Rights

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Data Portability: Request a copy of your data in a machine-readable format
• Opt-Out: Unsubscribe from marketing communications at any time
• Restriction: Request limitation of processing in certain circumstances
• Revoke Integration Access: Disconnect any connected third-party integration at any time from Varum's Integrations page; OAuth tokens are purged immediately on revocation

To exercise these rights, please contact us at support@varum.app. We will respond to your request within 30 days.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Maintain your login session
• Remember your preferences and settings
• Analyze platform usage and performance
• Improve user experience and features

You can control cookies through your browser settings. Disabling cookies may affect certain features of our platform.

Third-Party Services

• Authentication: Google OAuth, Microsoft OAuth, Apple Sign-In
• AI Services: OpenAI GPT for content generation (user-submitted prompts and content only)
• Cloud Storage: AWS S3, Firebase Storage
• Payment Processing: Stripe
• Integrations (user-opted): Google Drive, Slack, Dropbox, Meta Ads, Google Ads

These third-party services have their own privacy policies, and we encourage you to review them.

Children's Privacy

Varum is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our services, you consent to the transfer of your information to the United States and other countries where we operate.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of our services after such changes constitutes your acceptance of the updated policy.

Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: