Privacy Policy

This policy applies to information we process when you visit our site, create an account, or use the Service. It does not cover third-party services we do not control, even where the Service links to or integrates with them.

We collect the following categories of information:

• Account information — your name, email address, and authentication details when you sign up or sign in.
• Artifacts and content — the prompts, agent specs, commands, skills, workflows, and rubr_flow procedures you submit for grading, along with the rewrites, scores, and eval results we generate.
• Usage and device data — log data such as IP address, browser and device type, pages viewed, API calls, and timestamps, used to operate and secure the Service.
• Billing information — plan and transaction records; full payment card details are handled by our payment processor and are not stored by us.
• Cookies and similar technologies — used for sign-in, preferences, and, with your consent, analytics.

We use information to:

• Provide, maintain, and improve the Service, including grading artifacts, generating rewrites, and running evals.
• Authenticate you, manage your account, and process plans, credits, and billing.
• Monitor for abuse, enforce our Terms, and keep the Service secure.
• Respond to your requests and send service-related communications.
• Understand and improve how the Service is used, in aggregated or de-identified form where practicable.

To grade and rewrite your artifacts, the Service sends content you submit to AI model providers acting as our processors. These providers process the content to return a result and are contractually limited in how they may use it. Because submitted artifacts are transmitted to and processed by these providers, you should avoid including secrets, credentials, or sensitive personal data in the content you submit.

We use strictly necessary cookies to operate the Service, and analytics only where you have given consent. You can review and change your choices at any time through the cookie preferences control in the site footer. Declining analytics does not affect your ability to use the Service.

We do not sell your personal information. We share information only as needed:

• With service providers — model providers, hosting, analytics (with consent), and payment processing — who process information on our behalf under appropriate safeguards.
• For legal reasons — to comply with law, respond to lawful requests, or protect the rights, safety, and security of our users and the Service.
• In a business transfer — if we are involved in a merger, acquisition, or sale of assets, subject to this policy.

We retain information for as long as your account is active or as needed to provide the Service, and afterward only as required to comply with legal obligations, resolve disputes, and enforce our agreements. You can delete artifacts from your account, and you may request deletion of your account as described below.

We use technical and organizational measures designed to protect information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us at the address below; we will respond consistent with applicable law. You also have the right to lodge a complaint with your local data protection authority.

We and our service providers may process information in countries other than your own. Where we transfer personal information across borders, we use safeguards designed to provide an adequate level of protection as required by applicable law.

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, provide additional notice. We encourage you to review this policy periodically.

Questions about this Privacy Policy or your information can be sent to privacy@rubrkit.com.