Ruly Logo

Data Protection and Privacy Policy

Last Updated January 14, 2025

Subject to the Terms of Service, this Policy outlines our approach to data protection, security, and privacy. If you do not agree with our policies and practices, please do not use our services.

1. Data privacy and confidentiality.

Ruly does not sell user data to any third parties. Additionally, we do not use user data to train machine learning models. We leverage OpenAI's API and do not share user data with OpenAI for model training purposes. For further details, please refer to OpenAI's API documentation.

2. Leveraging industry-standard security measures.

The underlying language model we utilize through OpenAI complies with industry standards, including SOC 2 compliance. For further details, please refer to OpenAI's security and privacy policy: OpenAI Security and Privacy.

Ruly operates on Vercel's infrastructure, which incorporates robust data protection, security, and privacy controls. AWS compliance information can be viewed here: Vercel Security & Compliance.

3. Data storage and access.

Ruly does not collect personal information about your visits to Ruly or usage of Ruly unless you register an account. We collect the following information about you if you register an account: name and email address. Some information is automatically collected when you use our services, such as Internet Protocol (IP) address, browser, and device characteristics. If you choose to register or log in to Ruly using your Google account, we will have access to certain information about you, such as your email address and profile picture. We will store such account information unless you ask us to delete your account. Ruly does not sell such account information. Ruly uses account information to facilitate and assist your use of Ruly.

All user data is encrypted to prevent unauthorized access. Strict access control policies are enforced to ensure that only authorized personnel have access to sensitive information.

Additionally, Ruly uses the following third-party products and services which may collect your personal or other information:

  • We use Vercel's services to store and process data.
  • For the purpose of processing payment transactions, we use Stripe.
  • For website analysis, we use Google Analytics.
  • For authentication and end user management, we use Clerk.

Such third parties collect your information directly and do not share it with Ruly. Ruly does not have any control over information collected by such third parties, how it is used, and your information may be subject to the privacy policies of such third parties.

4. Third parties.

We may need to share your personal information in the following situations:

  • Business transfers. We may transfer or share your information in connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
  • Affiliates. We may share your information with our affiliates, in which case we will require those affiliates to honor this Data Protection and Privacy Policy. Affiliates include related companies (e.g., parent companies or subsidiaries), joint venture partners, or other companies that we control or that under common control with us.
  • Business partners. We may share your information with our business partners to offer you certain products, services, or promotions. We will require any such business partners to honor this Data Protection and Privacy Policy. We do not sell your personal information.

5. Cookies

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our services. Some online tracking technologies help us maintain the security of our services, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.

6. International access

Our offices are located in the United States. If you are accessing our services from outside the United States, please be aware that your information may be transferred to, stored by, and processed by us in our facilities and in the facilities of the third parties with whom we may share your personal information, in the United States and other countries.

7. How long we keep your information

We will only keep your personal information for as long as it is necessary for the purposes set out in this Data Protection and Privacy Policy, unless a longer retention is required or permitted by law (such as tax, accounting, or other legal requirements).

8. Do not track requests.

Most web browsers and some mobile operating systems and mobile applications include a do not track feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage no uniform technology standard for recognizing and implementing do not track signals has been finalized as such we do not currently respond to do not track browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future you will inform me about that practice and a revised version of this Data Protection and Privacy Policy.

9. Privacy updates.

Ruly may change this Privacy Policy from time to time, including as required to keep current with rules and regulations, new technologies, and security standards. Your use of Ruly constitutes your acceptance of, and agreement to, such changes.

10. Minors

Ruly does not knowingly solicit, market to, or collect personal or other information from children under the age of 18. You may not use Ruly if you are under the age of 13. By using the services you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent's use of the services. If you become anywhere of any data that has been collected from children under age 18, please contact us at serious@askruly.com.

11. User Control and Support

You may review, change, or terminate your account at any time. We provide users with tools to manage their data and ensure compliance with applicable privacy laws. Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, details about how we processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information these rights may be limited in some circumstances by applicable law. If you have any requests, questions, or concerns about your data, please contact us at serious@askruly.com.