A plain-language answer to the question every IT lead and operations stakeholder is actually asking.
When an association considers adding any AI platform to its tech stack, there's a question that doesn't always get asked out loud but is almost always present in the room: what happens to the data this system builds about our members — and what position are we in if we ever need to leave?
It's the right question. And it deserves a more direct answer than most vendors give.
What data rasa.io collects
rasa.io collects behavioral data from the emails you send through the platform. From this input, the AI infers topical interests: the subject areas, themes, and content types each subscriber has demonstrated affinity for through their behavior.
What rasa.io does collect
- Open events — when a subscriber opens an email, and on what device
- Click events — which links and content items a subscriber engages with
- Engagement patterns over time — frequency, consistency, and evolution of what a subscriber reads and ignores
- Correlations between behavior and individual email addresses
What rasa.io does not collect
- Browsing behavior outside of your emails
- Third-party data from external sources
- Any information members haven't implicitly provided through engagement with content you sent them
Two distinct layers — and who owns what
This is the part worth being specific about, because the answer is different depending on which layer you're asking about.
What “rasa.io owns the Enrichment Data” actually means in practice
Ownership of the Enrichment Data means a few specific things:
The data persists in rasa.io's systems after your contract ends and is not deleted at termination. It's used across the rasa.io platform to benefit all customers — the AI gets smarter for everyone because of what it learns from everyone. If a former member's email address later appears in another customer's database, rasa.io may associate previously generated Enrichment Data with that individual to improve recommendations in that new context.
It also means a few things that don't follow from ownership, and these are worth stating explicitly:
rasa.io will never sell your members' email addresses to any third party. rasa.io will not use your members' email addresses to contact them directly after your contract ends. During your contract, you have a full license to access, use, copy, and apply summarized Enrichment Data for your own internal business purposes.
Why this model exists — and why it’s not unreasonable
The Enrichment Data ownership model isn't an oversight or a power grab. It's structural to how the AI works.
rasa.io's personalization engine gets better the more it knows — not just about your members, but about behavioral patterns across the entire association community it serves. When the system learns that a certain type of content drives engagement for pharmacists, or governance professionals, or early-career members across hundreds of associations, that pattern becomes useful for every association on the platform. The pooled intelligence is what makes the AI meaningfully better than what any single organization could build from its own data alone.
The honest summary: the value you receive from rasa.io is the access to that intelligence during the term, applied specifically to your members and your content. That value is real and measurable. What you're not receiving is a transferable asset you take with you when you leave. This is the same model used by most AI platforms at the model layer — rasa.io is simply being transparent about it.
What you can do with Enrichment Data while you’re a customer
During your contract, you have a full license to access summarized Enrichment Data and use it for your internal purposes. In practice, that means:
Viewing individual member engagement profiles and topical interest data in your dashboard. Using trending topic reports to inform content strategy, event programming, and board reporting. Identifying members with declining engagement as an early signal for retention outreach. Pushing summarized engagement signals back to your AMS or CRM to enrich member records.
That last point is where the most operationally significant decision lies. If you consistently push engagement data back to your own systems throughout the relationship, the behavioral intelligence isn't siloed in rasa.io — it's being distributed into your system of record on an ongoing basis. See how data flows between rasa.io and your AMS →
This is why we recommend configuring the data flow back to your AMS as part of implementation — not as an afterthought. It's the most straightforward way to ensure your organization is building equity in the insights your members are generating, regardless of what platform you're using to generate them.
What actually leaves with you when you go
You retain
- Your full contact list and all member attributes you brought in
- Any summarized Enrichment Data you've exported or pushed to your own systems during the term
- The engagement history and behavioral signals living in your AMS if you've been syncing throughout the relationship
- Your email templates, content archives, and send history
You lose access to
- The rasa.io dashboard and the intelligence it surfaces
- The ongoing AI personalization and the recommendations it generates
- The compounding benefit of the platform's cross-customer learning
What you take with you is largely determined by how deliberately you managed the data flow during the relationship. Organizations that treat the back-to-AMS sync as a core part of their setup leave with meaningfully more than organizations that didn't.
What to ask any AI vendor before you commit
These questions are worth getting answered in writing from any AI-driven platform you evaluate — including rasa.io:
For rasa.io, the answers to questions 6 and 7 are unambiguous: no, and no. The others are answered above and in our contract, which we're happy to walk through before you sign.
The security and compliance baseline
rasa.io is GDPR compliant and ISO 27001 certified — a security standard covering how data is handled, stored, and protected at the organizational level. Your members' data is processed in accordance with applicable privacy regulations, and the platform is built to the standards associations in regulated member environments require.
Questions about how data flows in your specific tech stack, or want to walk through the contract language before a demo? Book a 25-minute conversation →
Questions about data? Let’s talk through them.
A 25-minute conversation about your specific situation — including a walk-through of the contract language if that's useful before you commit.
