Privacy policy

1. Information we collect

We collect the following information when you use Rubik:

• Account information: email address, name and password (stored securely by Supabase Auth)
• Project data: briefs, deliverables, process settings and reports you generate within the platform
• Usage data: pages visited, features used, errors and performance metrics
• Technical information: IP address, browser type, operating system and language

2. How we use your information

We use your information to:

• Provide, maintain and improve the Service
• Process payments and manage your subscription
• Send you relevant communications about the Service
• Detect and prevent fraud or abuse
• Comply with legal obligations

3. Third parties

We work with the following trusted providers:

• Supabase: Stores your account data, projects and deliverables. The servers are located in the United States. Supabase meets SOC 2 security standards.
• OpenAI: Processes AI assists (generate, validate, synthesize). The content of your deliverables is sent to OpenAI only during processing and is not stored by OpenAI for model training under our API account.
• Vercel: Hosts and deploys the web application. Vercel may log HTTP request metadata according to its privacy policy.

4. Cookies

We use only cookies strictly necessary to keep your user session. We do not use third-party tracking or advertising cookies. Session cookies are deleted when you log out.

5. Data security

We implement appropriate technical and organizational security measures, including encryption in transit (HTTPS/TLS) and at rest, secure authentication through Supabase Auth, and role-based access control (RLS) at the database level. However, no system is completely invulnerable; we recommend using strong, unique passwords.

6. Your rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or outdated information
• Delete your account and all your data (email us at hello@rubikscube.io and we will process your request within 30 days)
• Export your projects and deliverables at any time from the reports feature

7. Data retention

We keep your data while your account is active. When you delete your account, your data is permanently erased within 30 days, except what we must keep for legal or tax obligations (maximum 7 years). Projects from canceled accounts are kept in read-only mode for 90 days before being deleted.

8. Changes to this policy

We may update this privacy policy from time to time. We will notify you by email of significant changes at least 15 days in advance. The last-updated date at the top of this page always reflects the current version.

9. Contact

To exercise your rights or ask questions about privacy, contact us at: hello@rubikscube.io