Legal
GDPR & EU data rights
How residents of the EEA, UK, and Switzerland can exercise data protection rights with InMyCity.
Last updated July 1, 2026 · Privacy Policy · Terms of Use
Data controller
For personal data covered by the EU General Data Protection Regulation (GDPR), the UK GDPR, and similar laws, the data controller is:
Rumble Built, Inc.
Email: legal@rumblebuilt.com
We do not currently require a separate EU representative. If that changes, we will update this page.
Scope
This notice supplements our Privacy Policy for individuals in the European Economic Area (EEA), United Kingdom, and Switzerland. It does not apply to anonymized or aggregated civic records that are not personal data.
Your rights
Subject to applicable law, you may have the right to:
- Access — obtain confirmation of whether we process your personal data and receive a copy.
- Rectification — correct inaccurate account information.
- Erasure — request deletion when data is no longer needed or you withdraw consent where consent was the legal basis.
- Restriction — limit processing in certain circumstances.
- Portability — receive account data you provided in a structured, commonly used format.
- Objection — object to processing based on legitimate interests, including profiling related to direct marketing.
- Withdraw consent — where processing relies on consent, without affecting prior lawful processing.
How to submit a request
Email legal@rumblebuilt.com from the address associated with your InMyCity account with the subject line “GDPR request” and the right you wish to exercise. We may ask you to verify your identity before fulfilling a request.
We aim to respond within one month. Complex or numerous requests may take an additional two months; we will notify you if an extension is needed.
You may also manage some data directly: update profile settings in your dashboard, cancel subscriptions via the Stripe billing portal, and delete API keys from the API keys panel.
Legal bases
We process personal data under the legal bases described in our Privacy Policy — primarily contract (to deliver the Service), legitimate interests (security and product improvement), legal obligation, and consent where required.
International transfers
InMyCity is operated from the United States. When we transfer personal data from the EEA, UK, or Switzerland to the US or other countries, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission (or UK equivalent) with our subprocessors, unless an adequacy decision or other valid transfer mechanism applies.
Primary subprocessors include Supabase (hosting and authentication) and Stripe (payments). Copies of relevant safeguards may be requested at legal@rumblebuilt.com.
Automated decision-making
InMyCity produces statistical forecasts, grades, and Copilot responses. These are informational tools and are not used as the sole basis for legal or similarly significant decisions about you. We do not engage in fully automated decision-making that produces legal effects concerning individuals without human review.
Complaints
If you believe we have not handled your personal data lawfully, you have the right to lodge a complaint with your local supervisory authority. We encourage you to contact us first at legal@rumblebuilt.com so we can try to resolve your concern.
Children
The Service is not directed to children under 16. We do not knowingly process children's personal data in the EEA/UK without appropriate consent. Contact us to request deletion if you believe we have collected a child's data in error.