This Privacy Policy explains how RuleboardAI (“RuleboardAI,” “we,” “us,” or “our”) collects, uses, and protects personal data when you visit our website or contact us. We are built around data minimization: we collect and process only what is necessary to deliver the service, and we retain as little as possible. It is not a substitute for the terms of any signed agreement between us.
1. Who we are
The data controller responsible for your personal data is RuleboardAI LLC, based in Bridgewater, NJ, United States. For any privacy question or request, contact us at privacy@ruleboardai.com.
2. What personal data we collect
We collect only what we need to respond to you and operate this website:
- Information you give us through our website forms:your name, email address, and phone number (optional); the company name, website, and location you submit, whether the company is public or private, and its ticker (if it is public); and the contents of your message. Which of these we ask for depends on the form — the contact, category-request, and general-inquiry forms each collect a subset.
- Regulatory digest sign-up: if you subscribe to the regulatory digest, we store the email address you provide with our email provider in order to send it to you. You can unsubscribe at any time using the link in any digest email.
- Technical and usage data: limited data automatically generated when you visit the site, such as IP address and browser type, processed by our hosting provider to deliver and secure the website. We also use a privacy-first, cookieless analytics tool that measures aggregate, anonymous usage and does not collect personal data or track you across sites — see Section 8.
We do not intentionally collect special categories of data (such as health or financial account details) through this website. Please do not include sensitive information in the contact form.
3. How we use your data and our legal basis
We use personal data to:
- respond to your inquiry and follow up about a possible engagement;
- operate, secure, and improve the website; and
- comply with our legal obligations.
Where the EU/UK GDPR applies, our legal basis is our legitimate interest in responding to inquiries and running our business (Art. 6(1)(f)), and, where required, your consent (Art. 6(1)(a)). You can withdraw consent at any time.
4. We do not sell your data
We do not sell, rent, or monetize your personal data, and we do not share it for cross-context behavioral advertising. We share data only with the service providers described in Section 5, and only as needed to provide the service.
5. Service providers (processors)
We rely on a small number of third-party providers who process data on our behalf under appropriate contractual terms:
- Hosting: Vercel (website hosting and delivery).
- Contact-form / email handling: Resend (transactional email delivery); contact-form submissions are delivered by email to a RuleboardAI-operated mailbox.
- Analytics: Plausible Analytics — a privacy-first, cookieless analytics service (EU-hosted) that provides aggregate, anonymous usage statistics only. It sets no cookies, collects no personal data, and does not track visitors across websites.
6. Data retention
We keep contact-form submissions only as long as needed to respond to your inquiry and to maintain a reasonable record of our correspondence. Our retention period for contact-form submissions is 24 months, after which we delete or anonymize them. You may ask us to delete your data sooner (see Section 9).
7. International transfers
Our providers, including Vercel, may process data in the United States. Where data is transferred internationally, we rely on appropriate legal safeguards, such as the European Commission's Standard Contractual Clauses, to protect it.
8. Cookies and analytics
This site uses only the cookies strictly necessary for it to function. We do not use advertising or cross-site tracking cookies. For analytics we use Plausible — a privacy-first, cookieless service that measures aggregate, anonymous traffic (such as page views and referrers) without setting cookies, collecting personal data, or building visitor profiles.
9. Your rights
Depending on where you live, you have the right to:
- access the personal data we hold about you;
- correct inaccurate data (rectification);
- request deletion (erasure);
- request a portable copy of your data;
- object to or restrict certain processing; and
- under U.S. state laws such as the California CCPA/CPRA, the right to know, the right to delete, and the right to opt out of any “sale” or “sharing” of personal data (we do neither).
To exercise any right, contact privacy@ruleboardai.com. We will respond within the timeframes required by applicable law. You also have the right to complain to your local data protection authority.
10. Children's data
This website is intended for business users and is not directed to children. We do not knowingly collect personal data from anyone under 16.
11. Security
We protect data in transit using HTTPS/TLS and apply reasonable safeguards described on our Security & Data Handling page. No method of transmission or storage is completely secure, but we work to protect your information.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be highlighted where appropriate.
13. Contact
Questions about this policy or your data? Email privacy@ruleboardai.com or use the contact form.
This document is a template and not legal advice. It should be reviewed by qualified counsel before publication.