Rare Tomato Privacy Notice
Effective date: 2026-10-03. Operator: Rare Tomato, Cleveland, Ohio, USA. Privacy, support and requests: support@raretomato.ai.
In short. Rare Tomato keeps a short list of details you choose to share about how you like things done, and lets the AI agents you connect read them. It also keeps a record of what those agents tell it they did, and the rules you save for them. We try to keep this small. We cannot control what an agent does once it has read something, and this notice says where our control ends.
Who this covers. Visitors to this site, people with an account, and people whose information is added by a user or by an agent. The AI providers you connect (such as Claude, ChatGPT, Grok Bot or Muse) and the Claude service we use are independent companies with their own notices. This notice covers what Rare Tomato does. Rare Tomato is for adults who are 18 or older, anywhere in the world. Rare Tomato is a personal project, open source and provided as is. Reports and comparisons shown here can be inaccurate.
1. What we store
| What | How it is stored |
|---|---|
| Your sign-in email and sign-in identifier; that you confirmed you are an adult; the Terms version you accepted and when | In our database. Not encrypted at the application field level. |
| Your details (preferences, contacts, family details) | The detail itself is encrypted at the field level. Its short label, its category, any Sensitive label and the list of agents you chose for it are not. |
| Your agents: the name you gave each, what kind it is, what it may read, when it last connected | Not encrypted at the application field level. |
| Authorization and consent records: an identifier from each agent's sign-in and, only where a token is used, a one-way hash of it (never the token); your acceptance of the Terms | Not encrypted at the application field level. |
| What agents tell us they did (task records) | The summary and the optional details are encrypted at the field level. The kind of task, the outcome, the time and which agent are not. These are what the agent reported; we do not check them. |
| Your feedback on a task | The note is encrypted at the field level. The thumbs up or down and the reasons you chose are not. |
| Your rules and their history | Not encrypted at the application field level. Only rules you save are shown to agents. |
| Generated rule drafts | After a thumbs-down we draft a rule. It is kept, not field-encrypted and never shown to any agent, until you save it, tap Not now (which deletes it), or about 30 minutes pass (it is then deleted). |
| How each task compared with your rules (the check result) | Not encrypted at the application field level. The verdict, which check gave it and when. Comparisons and scores come from Rare Tomato's own check, which is best-effort and can be wrong. The check uses what the agent reported; the agent does not produce the score. |
| A record of what agents asked for (which agent, which tool, when, which kinds of detail) | Not encrypted at the application field level. It never contains the details themselves. You can see it on Settings and data. |
| Request and connection data our host records | Our hosting provider (Vercel) records technical information about requests, such as the time, the page and the result, for a short time. We have not confirmed everything it records or for how long. Our own code does not write your details to logs. If a server error happens, the host's logs may hold technical text from the failed request, which can include readable fields such as a detail's short label or a rule's wording (encrypted fields appear only in encrypted form). |
| Support emails | If you email support@raretomato.ai, we keep your message and our reply in our mailbox. |
Labels, categories, rules, rule history and feedback reasons are not encrypted at the field level and can still reveal personal information. Your details, task summaries and details, and notes are encrypted at the field level. Our servers can decrypt them to run the service and to give them to agents you allow. Your details are stored encrypted, but our servers can decrypt them in order to pass them to your agents. This is not end-to-end encryption. No security measure removes every risk.
2. Where information comes from and what we use it for
Where it comes from: you; agents you authorize; and our sign-in provider. You may add information about household members or contacts, and agents may mention people in the task reports they send us.
What we use it for: sign-in and access; sharing the features you ask for with the agents you allow; activity history, rule suggestions and comparisons; security and operation of the service; and support.
3. Sensitive information
Please do not enter government ID numbers, card or bank details, passwords, insurance or medical record IDs, test results or clinical documents. When you save something, an automatic check runs inside our own service and turns away text that matches obvious patterns of these. It also warns about words that suggest a health condition or your own finances. The check is best-effort. It can miss things and it can flag harmless text. A Sensitive label is a prompt, not a guarantee. The same turn-away check runs on rule text, notes and agents' task records. The text you enter is not sent to an outside provider for this check.
You may add optional health details, such as an allergy or a medication reminder. They are labeled Sensitive and are shown only to the agents you choose, and you can delete them any time. A Sensitive detail starts limited to agents you choose, with none chosen, so no agent can read it until you tick one on its card. We do not provide a specialized health-data consent process. Only add details about someone else if you have their permission or the legal authority to share it.
4. Who processes your information
| Service | What it does | What we know |
|---|---|---|
| Vercel | Hosts the website and the connection agents use. Everything you and your agents send us passes through it. | Our functions run in Washington, D.C. Request logs are kept briefly; we have not confirmed the period. |
| Neon | Our database. It holds the stored information in section 1. | AWS us-east-1 (United States). Our recovery window is 6 hours. |
| WorkOS | Signs you in. It holds your email and sign-in details. | We have not confirmed where it processes data. |
| Anthropic (the Claude AI service) | Drafts a rule from your feedback, compares a new rule with your existing ones, and helps compare a task with your rules. | See the paragraph below. |
We have not confirmed written data-processing terms with each provider.
What goes to Anthropic, exactly. (a) Rule draft, after a thumbs-down: the reasons you chose, your note if you wrote one, the task summary, the task's kind, and the wording of up to ten of your approved rules in that kind. (b) Overlap check, when a proposed rule may overlap one of yours: the wording and the "when it applies" line of both rules, not redacted. (c) Scoring: the task summary and the rule wording after we replace names, emails, phone numbers, addresses and birth dates with placeholders. That replacement is best-effort and can miss a name. We do not send your saved details to Anthropic directly, but the text we send can repeat what you or an agent wrote. Anthropic's statements about retention and training come from its public pages and we have not verified them for our configuration. Our use of Anthropic is separate from any Claude account or agent you connect yourself.
5. Your AI agents
- Review an agent's provider before you connect it. When you connect an agent, it can read the details and rules you allow and can tell us what it did.
- Changing or removing an agent on Your agents stops its future access through Rare Tomato immediately. It cannot recall what the agent already received. Deleting here does not delete a copy an agent has kept in its own memory. Independent providers may keep copies in their own memory under their own terms.
- Rules are advice. An agent must ask for them and may ignore them, and we cannot see whether it followed one. Task records are the agent's own reports. Comparisons and scores come from Rare Tomato's own check, which is best-effort and can be wrong. The check uses what the agent reported; the agent does not produce the score.
- We remain responsible for our own processing of your information.
6. Your choices, your rights and how long we keep things
- See, edit and delete any detail, rule or task record. Deleting removes it from our database straight away.
- Download everything we hold about you as one file, on Settings and data.
- See which agent asked for which kinds of information and when, on Settings and data.
- Delete your account and everything in it, on Settings and data.
- Change what each agent can read, or remove it, on Your agents.
- You can also email support@raretomato.ai, including if information about you was added by someone else and you have no account.
Depending on where you live, you may have rights to access, correct, delete or get a copy of your information. We will respond within the time the law requires. You may also contact your local data protection authority.
What deleting your account removes at once: everything we hold about you in our database (details, task records, feedback, rules and drafts, the check results, the activity record and your agent connections), and we ask our sign-in provider to remove your sign-in record. What can remain: a one-way scrambled form of your sign-in identifier (so an old sign-in cannot quietly re-create the account); our database provider's 6-hour recovery window; short-lived host logs; and whatever an agent or Anthropic has kept. We keep your information until you delete it.
7. Where it is processed, and why
Rare Tomato runs in the United States. If you use it from elsewhere, your information is processed and stored in the United States. We have not confirmed transfer arrangements with each provider.
We process information to provide the service you ask for, to keep it secure and, for optional health details you choose to add, because you chose to add them. You can withdraw that by deleting them or by emailing us.
8. Household members and children
Accounts are for adults only. Children cannot create accounts or connect agents. If you add information about a household member, use first names or nicknames and only what is needed. Do not add full birth dates (a birth year is fine), government IDs or clinical documents. Only add a child's details with parental or guardian authority. To ask about information added about you, or about a child you have authority for, email support@raretomato.ai.
9. Cookies and browser storage
Our public pages set no cookies and load no third-party scripts, analytics or advertising.
| Name | What it does | How long | Needed? |
|---|---|---|---|
| wos-session | Keeps you signed in. | Up to 30 days | Essential |
| wos-auth-verifier | Holds the sign-in step while you sign in. | 10 minutes | Essential |
| rt_session_cleared and rt_callback_failed | A marker so you are not sent round in a loop after a sign-in error. Set only after an error. | 60 seconds | Essential |
| rt-install-card-dismissed (browser local storage) | Remembers that you dismissed the install card. | Until you clear your browser's site data | Not essential |
While you sign in, WorkOS (our sign-in provider) and its provider Cloudflare set their own cookies (such as __cf_bm and _cfuvid) on their pages. We do not control them.
10. Changes and contact
We update this notice and its date when something changes. Material changes to the Terms need you to accept them again the next time you sign in. We do not send an email about changes yet.
Operator: Rare Tomato, Cleveland, Ohio, USA. Privacy, support and requests: support@raretomato.ai.