01
Scope and controller
Ruhub is the history layer for AI work, operated by Ring0 Labs. This Privacy Policy explains how Ruhub ("Ruhub," "we," "us," or "our") handles personal data when you visit ruhub.ai, join the waitlist, create an account, communicate with us, or use a service that links to this policy.
For the public website, waitlist, account administration, security, and direct communications, Ruhub determines why and how personal data is processed. If a future business service processes workspace content only on an organization's instructions, the organization may be the controller and Ruhub may act as its processor under separate terms or a data processing agreement.
Privacy requests may be sent to angel@ruhub.ai or angel@r-0.org.
02
Information we collect
We collect information from you, your browser or device, identity providers you choose, and the infrastructure providers that operate the Service.
- Waitlist: email address, the page or form used to join, join time, confirmation state, and the email provider's delivery message identifier.
- Account and profile: name, email address, authentication identifiers, session information, and profile data supplied directly or by an identity provider. Supabase processes passwords; Ruhub does not receive them in readable form.
- Communications: the content and metadata of messages you send to us.
- Technical and security data: IP address, browser and device details, request time, and diagnostic or security logs. The waitlist uses an IP-derived rate-limit identifier temporarily and does not attach it to your waitlist record.
03
Product and workspace data
The current public website provides informational pages, a waitlist, and account authentication. It does not currently host repositories or execute agents. Product illustrations are examples, not records of live customer activity.
Before Ruhub activates features that process source code, files, prompts, agent or tool output, execution logs, approvals, lineage, receipts, collaborators, repository metadata, or integration credentials, we will provide an updated notice at collection. Business customers may also receive a data processing agreement and subprocessor information. Do not submit that material through the waitlist or support email.
04
Purposes and legal bases
- Waitlist: record your request, prevent duplicates, and send the confirmation and launch message you requested. We rely on your request and consent, which you may withdraw.
- Accounts: create, authenticate, and support an account. We rely on steps requested before a contract, performance of a contract, and our legitimate interest in delivering the Service.
- Security and operations: prevent abuse, enforce limits, diagnose failures, and protect Ruhub and its users. We rely on legitimate interests in reliable and secure operations.
- Communications and legal obligations: answer messages and rights requests, keep required records, resolve disputes, and enforce our Terms and Conditions. We rely on your request, legal obligations, and legitimate interests.
05
Messages and your choices
Joining the waitlist requests a confirmation and one launch notification. It does not subscribe you to unrelated marketing. You may leave the waitlist or withdraw consent at any time by emailing either privacy contact. Transactional, security, and legal notices may still be sent when necessary to operate an account or comply with law.
We do not sell personal data, share it for cross-context behavioral advertising, or use it for targeted advertising. The public website does not currently use behavioral analytics or advertising trackers. Because we do not track people across unaffiliated websites, we do not respond differently to browser Do Not Track signals.
07
Providers and disclosures
We disclose data only to operate and secure the Service, complete something you request, complete a business reorganization subject to appropriate protections, or comply with law. Current provider categories are:
- Supabase for authentication and account sessions.
- Resend for waitlist email. The confirmation contains your email, join time, and join source.
- Upstash Redis for waitlist records, deduplication, confirmation state, and rate limiting.
- Vercel for hosting, content delivery, and operational logs.
- Google only when you choose Google sign-in.
08
International processing
These providers may process data outside your country. Where applicable law requires it, transfers must use an approved legal mechanism, such as an adequacy decision or contractual safeguards, and remain subject to provider and data-processing terms. Contact us to request information about the mechanism applicable to your data.
We do not authorize a recipient to use transferred data for its own unrelated purposes. Disclosures required by law or needed to provide a service you requested may be subject to statutory exceptions.
09
Retention and deletion
Waitlist email, source, join time, and successful confirmation state remain until the waitlist closes or you request removal; the current system does not apply an automatic expiry. Temporary sending locks expire after about five minutes, and IP-based waitlist rate-limit identifiers expire after the limiter window. Providers may retain delivery and operational logs under their own schedules.
Account data remains while the account is active and afterward only as needed for security, disputes, legal obligations, and limited backups. We delete, anonymize, or block access when a purpose and required retention period end. A future product may preserve correction or lineage metadata where integrity or law requires it; any such limitation will be disclosed before that feature is activated.
10
Your rights
Subject to applicable law and exceptions, you may request access, correction, deletion or cancellation, restriction, objection, portability, or withdrawal of consent. We do not currently make decisions producing legal or similarly significant effects based solely on automated processing.
- Mexico: you may exercise ARCO rights: access, rectification, cancellation, and opposition. A request should identify you, describe the right and data concerned, explain requested corrections when relevant, and include a contact for our response. We may request proof of identity or representation. We will communicate a determination within 20 days and, if granted, act within the following 15 days, subject to a legally permitted extension. Rights requests are free except permitted reproduction or delivery costs.
- EEA and United Kingdom: where applicable, you may also object to legitimate-interest processing, request restriction or portability, withdraw consent, and complain to your local supervisory authority. We aim to respond within one month, subject to a lawful extension.
- United States: where a state privacy law applies, you may have rights to know, correct, delete, obtain a copy, opt out of sale, sharing, or targeted advertising, and appeal a refusal. Ruhub does not currently sell personal data or use it for targeted advertising.
11
Security, incidents, and children
We use technical and organizational measures designed to protect personal data, including access controls, secure session settings, request limits, and provider safeguards. No online service is perfectly secure. We will notify affected people and authorities of qualifying incidents as required by law.
Ruhub is intended for people aged 18 or older. We do not knowingly collect personal data from children. Contact us if you believe a child submitted data so we can investigate and remove it where required.
12
Changes and contact
We may update this policy as Ruhub changes. We will post the revised policy, update its effective date, and provide email or in-product notice of material changes where appropriate or required.
To exercise a right, leave the waitlist, or ask a privacy question, email angel@ruhub.ai or angel@r-0.org. Include the email associated with Ruhub, the request you are making, and your preferred response method. We may verify identity before acting. You may also complain to the competent authority; in Mexico, that is the Secretaría Anticorrupción y Buen Gobierno.