Privacy Policy

1What we collect

• Account details, such as your name and email address, and your sign-in method.
• Billing details, handled by our payment processor. We never see or store your full card number.
• Operational data, such as request metadata, IP addresses, resource metrics and logs, used to run and secure the Service.
• Your content, meaning the code, data and secrets you deploy, which we process only to provide the Service.
• Support messages you send us.

2How and why we use it

We use your data to provide and maintain the Service, to build and run your Eggs, to take payment, to keep the platform secure and prevent abuse, to provide support, to meet our legal obligations, and to improve the product. Our legal bases are the performance of our contract with you, our legitimate interests in running a secure and reliable service, compliance with legal obligations, and your consent where it applies.

3Your code and data

We treat the content you deploy as confidential. We do not access it except as needed to operate the Service, to provide support you have asked for, or where required by law. Environment variables and secrets are encrypted, and are never written to our logs in plain text.

4Who we share it with

We do not sell your personal data. We share it only with the service providers who help us run Ruust, under appropriate contracts, including our payment processor (Stripe), our edge and DNS provider (Cloudflare), our email provider, and, where you connect it, GitHub. We may also disclose data where the law requires it.

5Where it is processed

Ruust runs in independent regions, currently in the United Kingdom (eu-west) and the United States (us-east). Your Eggs run in the region you choose. Where personal data is transferred outside the UK or the EEA, we rely on appropriate safeguards such as the UK and EU standard contractual clauses.

6How long we keep it

We keep your account data for as long as your account is active, and for a reasonable period afterwards to meet legal, accounting and security needs. When you close your account, your Eggs and their data are deleted after a short grace period. You can ask us to delete your data sooner.

7Security

We protect your data with encryption in transit, encrypted secrets at rest, scoped access controls and a pull-based architecture where our control plane never opens a connection into a host. No system is perfectly secure, but we take these safeguards seriously and keep them under review.

8Your rights

Subject to applicable law, you have the right to access, correct, delete, restrict or object to our use of your personal data, and to data portability. You can also withdraw consent where we rely on it. To exercise a right, email [email protected]. If you are in the UK, you can also complain to the Information Commissioner's Office (ico.org.uk).

9Cookies

We use a small number of strictly necessary cookies, such as the session cookie that keeps you signed in. We do not use advertising or cross-site tracking cookies.

10Changes and contact

We may update this policy from time to time, and will show the current version by the "last updated" date above. For anything to do with your privacy, contact us at [email protected].