Privacy Policy
Effective Date: March 2, 2025
Last Updated: March 2, 2025
At RubyMB ("we," "our," or "us"), we are committed to safeguarding your privacy and ensuring a transparent and secure experience when you use our services. This Privacy Policy outlines how we collect, use, disclose, and protect your personal data when you access and use rubymb.com and its subdomains (the "Platform"). By using our Platform and services, you consent to the collection and processing of your information as described in this Privacy Policy.
Information We Collect
We collect the following types of information to provide and improve our services:
-
Personal Information:
- Account Information: When you register for our platform, we collect personal data such as your name and email address.
- Payment Information: For billing and subscription services, we use third-party payment processors like Stripe. We do not store any sensitive payment information (e.g., credit card numbers) on our servers.
-
Usage Data & Analytics:
- Security & Monitoring Data: We collect technical data related to your use of our platform, including IP addresses, device type, browser type, and access times. This data helps us monitor platform performance, improve security, and troubleshoot issues.
- Analytics: We use third-party services (such as Google Analytics) to understand how users interact with our platform and improve user experience.
-
Sensitive Data:
- We do not collect or process sensitive personal data such as health information, biometric data, or other sensitive categories of information unless explicitly stated.
How We Use Your Data
We use your data for the following purposes:
- Account Creation and Management: To create, maintain, and manage your user account on our platform.
- Customer Support: To provide customer support services, answer inquiries, and resolve issues you may face while using the platform.
- Security and Fraud Prevention: To protect against unauthorized access, prevent fraud, and maintain the integrity and security of the platform.
- Service Improvement and Analytics: To improve our platform by analyzing usage patterns, optimizing functionality, and enhancing user experience.
- Marketing and Communications: To send you newsletters, promotional offers, and service-related notifications, where applicable, based on your consent.
- Payment Processing: To process payments and manage subscriptions through third-party payment processors (Stripe).
Legal Basis for Processing (GDPR Compliance)
Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal grounds:
- Contractual Necessity: To fulfill the contract we have with you (e.g., providing our services).
- Legitimate Interest: To maintain platform security, improve services, and ensure proper functioning.
- Consent: For direct marketing communications or other non-essential activities (e.g., email subscriptions).
How We Obtain User Consent
- By accessing or using our services, you consent to the terms outlined in this Privacy Policy.
- In certain cases, we may request explicit consent (e.g., to send marketing emails) through opt-in forms.
Data Sharing & Third-Party Services
We do not sell or rent your personal data to third parties. However, we share data with trusted third parties to support our platform's functionality, including:
- Payment Processor: Stripe, for processing subscription payments.
- Hosting & Infrastructure Providers: We rely on reputable cloud services like Google Cloud Platform (GCP) and Hetzner for hosting and security.
If your data is transferred to countries outside the European Union (EU)/European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs), to ensure the protection of your data.
Data Security Measures
We take robust security measures to protect your personal information from unauthorized access, alteration, or destruction:
- Encryption: We use TLS/SSL encryption for data transmitted between your device and our servers.
- Access Control: We implement Role-Based Access Control (RBAC) to limit access to your data to authorized personnel only.
- Authentication: We employ Single Sign-On (SSO) protocols for secure user authentication.
- Security Audits: Our platform undergoes regular security audits and vulnerability assessments to ensure ongoing protection.
Data Retention Policy
- We retain your personal data only for as long as necessary to provide you with our services.
- If you choose to delete your account, all your personal information will be permanently removed from our systems.
Cookies & Tracking Technologies
- We do not currently use cookies or other tracking technologies on our platform.
- However, we may use third-party tools like Google Analytics, which may utilize cookies to analyze traffic on our website.
User Rights Under GDPR
As a user, you have the following rights regarding your personal data:
- Access: You can request a copy of the personal data we hold about you.
- Rectification: You can request the correction of inaccurate or incomplete data.
- Deletion: You can request the deletion of your personal data under certain conditions.
- Objection: You can object to the processing of your data in specific situations.
- Portability: You can request a copy of your data in a machine-readable format for transfer to another service.
To exercise any of these rights, please contact us at hi@rubymb.com.
Policy Updates & Notifications
- We may update this Privacy Policy from time to time.
- Any changes will be posted on this page with an updated "Effective Date."
- We may also notify you via email about significant changes to this policy.
Contact Information
If you have any questions or concerns about this Privacy Policy, please contact us at:
- Email: hi@rubymb.com