Privacy Policy

• Account details from Google when you sign in: your name, email address and profile picture.
• What you enter: the business ideas and preferences you submit, and the stacks generated for you, which are saved to your history.
• Usage and billing records: your plan, search credits used, request times and subscription status.
• Technical data: IP address, browser type and logs that our hosting providers record to run and secure the Service.

We do not receive or store your card details. Payments are handled by Dodo Payments, which shares with us only what we need to manage your plan, such as your email, plan and payment status.

Please do not enter sensitive personal information in your ideas.

• To provide the Service: sign you in, generate stacks, save your history and track search credits.
• To handle subscriptions, billing questions and refunds.
• To keep the Service secure and prevent abuse, such as duplicate free accounts.
• To fix problems and improve the Service.
• To send you important messages about your account, billing or changes to our terms.

We process your data to perform our contract with you (providing the Service), for our legitimate interests (security, preventing abuse and improving the Service), to meet legal obligations (such as tax and accounting records), and with your consent where the law requires it.

We do not sell your personal data or use it for advertising. We share it only with service providers that help us run Rubric:

• GoogleSign-in with your Google account
• SupabaseAccount, database and authentication hosting
• VercelWebsite and app hosting
• OpenAIGenerating stack recommendations from the idea you enter
• Dodo PaymentsPayments, tax and billing as our Merchant of Record

OpenAI receives the idea and preferences you enter in order to generate recommendations. Under OpenAI’s API terms, this data is not used to train its models. We may also disclose data when required by law.

Our providers may store or process data outside your country, including in the United States and the Republic of Korea. Where required, they use safeguards such as standard contractual clauses.

We keep your account data and saved stacks while your account is open. You can delete any saved stack from your History at any time. When you delete your account, we delete your account data within 30 days, except billing records we must keep for tax and accounting purposes.

Depending on where you live, you can ask to access, correct, export or delete your personal data, or object to or restrict how we use it. Email help.rubric@gmail.com and we will respond within 30 days. You can also complain to your local data protection authority.

We use only essential cookies that keep you signed in. We do not use advertising or cross-site tracking cookies.

Data is encrypted in transit, and access to your records is restricted so that only you can read your stacks and usage. No system is perfectly secure, but we work to protect your data and will notify you of a breach as required by law.

Rubric is not intended for anyone under 16, and we do not knowingly collect their data.

We may update this policy. If a change is significant, we will notify you by email or in the app before it takes effect.