LEGAL

Privacy Policy

What we collect, why we need it, and the control you have over it.

Last updated 24 September 2026

THE SHORT VERSION

We collect only what running Rebound needs: your Telegram account, your public Dribbble profile, and your membership details.

We never ask for your Dribbble password and never see your card number. Whop handles payments.

Other members see your Dribbble name and the shots you boost. That’s how the community works.

Your chats with the AI assistant aren’t saved. They’re forgotten after a few minutes.

We don’t sell your data or show you ads. To see or delete your data, write to support@rebound.design.

This summary is here to help you find your way. The full policy below is what applies.

1. Who we are

Rebound (“Rebound”, “we”, “us”) runs the Rebound Telegram bot (@myrebound_bot) and the website at rebound.design. We are responsible for the personal data described in this policy.

If you have a question about your data, write to us at support@rebound.design.

2. What we collect

From your Telegram account: your Telegram user ID and username, and the messages you send to the bot.

From your public Dribbble profile: the profile link you give us, your Dribbble username and display name, and public details we read to check your profile is set up, such as your avatar, bio, number of shots and when you joined.

From your shots and tasks:

  • the shots you boost: their link, title, image, description and tags;

  • the public stats of boosted shots (views, likes, saves and comments) over the days after posting;

  • the tasks you’re given and whether each was done, which we check by reading Dribbble: a shot’s likes and comments, and your public “Saved” collection.

From Whop, when you pay: your Whop user and membership IDs, your plan and billing status, payment dates and amounts, and your email address if Whop shares it with us.

From how you use Rebound: your credits, streak, plan changes, referrals, feedback and support messages, and the results of any shot analyses you ask for.

From our website: see “Our website” below.

3. What we never collect

  • Your Dribbble password, or any access to your Dribbble account. We never log in as you.

  • Your card or bank details. Whop collects those and never shares the full numbers with us.

  • Your Telegram contacts, other chats, phone number or messages you don’t send to the bot.

4. How we use your data

We use your data to:

  • run your membership: create your account, give you credits, send your boosts to other members and send you tasks (because it’s needed for our agreement with you);

  • check that tasks were really done and keep the community fair (our legitimate interest in a service that works for every member);

  • handle payments, plan changes, refunds and billing questions with Whop (our agreement with you, and our legal obligations);

  • answer your questions and feedback, and run the optional AI features you choose to use;

  • keep Rebound secure, prevent abuse and fix problems (our legitimate interest);

  • understand how Rebound is used so we can improve it (our legitimate interest).

We don’t sell your data, share it for advertising, or use it to show you ads. We don’t send marketing emails. We’ll only message you in the bot about your membership, your tasks and Rebound itself.

5. What other members see

Rebound is a community, so some of your information is shared with other members. When you boost a shot, other members see your Dribbble name and the shot in their tasks. Your likes, saves and comments on Dribbble are public there, as they always are.

Links to boosted shots use rebound.design addresses. When one of these links is shared, it can show the shot’s public title and image as a preview.

6. AI features

Some features use an AI model provided by Anthropic. Anthropic processes this data on our behalf to return a result, and under its commercial terms it doesn’t use it to train its models.

  • The assistant. When you ask a question, we send your message, the conversation so far and the account details it needs to answer (such as your plan, credits and streak). Conversations are kept only in memory, are never saved to our database, and are forgotten after 5 minutes of silence. If you agree to pass a question to our team, it’s shared with the team and appears in our technical logs.

  • Shot analysis. Only when you ask for it, we send the shot’s image, title, description and tags, and keep the analysis so you can see it again.

  • Checking comments. To check comment tasks, we may send the public text of a shot’s page, including public comments and names shown there.

7. Who we share it with

We share data only with the service providers that help us run Rebound, and only what each one needs:

  • Whop, our merchant of record, for checkout, payments, tax and membership management.

  • Telegram, which delivers every message between you and the bot.

  • Anthropic, which provides the AI features described above.

  • Railway, which hosts the bot, our database and our technical logs.

  • Framer, which hosts our website.

We read public Dribbble pages to run Rebound, and we read who liked a shot using Rebound’s own Dribbble account. We don’t send your personal data to Dribbble.

We may also share data if the law requires it, to protect our rights or the safety of our members, or with a company that takes over Rebound, which would then be bound by this policy.

8. Where your data is processed

Our service providers may process data in countries outside the one you live in, including the United States. Where the law requires it, we rely on safeguards such as the European Commission’s Standard Contractual Clauses.

9. How long we keep it

We keep your account data while you’re a member. After your membership ends, we keep it so you can return where you left off, with any extra credits you bought, and so we can answer billing questions, handle disputes and keep records the law requires. If you’d like your data deleted sooner, just ask.

AI assistant conversations are not stored. Technical logs are kept by our hosting provider for a limited period.

10. Our website

Our website is hosted on Framer. When you visit it, Framer processes technical data such as your IP address and browser type to show you the page, and may record basic visit statistics. We don’t use advertising or cross-site tracking cookies.

When you start a checkout from the website, you move to Whop to pay, and Whop’s privacy policy applies there.

11. Your rights

Depending on where you live, you have the right to:

  • get a copy of the personal data we hold about you;

  • ask us to correct it, or to delete it;

  • object to, or ask us to limit, how we use it;

  • receive your data in a portable format;

  • withdraw your consent, where we rely on it;

  • complain to your local data protection authority.

To use any of these rights, write to support@rebound.design from any address and include your Telegram username or Dribbble profile so we can find your account. We’ll reply within 30 days. Deleting your data ends your membership, because Rebound can’t run without it.

12. Security

Only our team can see member data, and we keep access to a minimum. Our database and logs are hosted with Railway, payments stay with Whop, and we never hold card numbers or passwords. No system is perfectly secure, but we work to protect your data and will tell you if a breach affects you.

13. Children

Rebound is for adults. You must be at least 18 to join, and we don’t knowingly collect data from anyone younger. If you think a child has signed up, please tell us and we’ll delete their data.

14. Changes to this policy

We’ll update this policy when Rebound changes. The date at the top shows the latest version. If a change is significant, we’ll tell you in the bot before it takes effect.

Questions about your data?

Write to support@rebound.design. We’ll help you see, correct or delete your data.