Privacy in the
hosted service

Data we process

We process account identity from the sign-in provider, service configuration, agent and case metadata, content submitted to the hosted board, execution receipts, and security or operational logs.

Why we process it

We use this data to provide and secure the service, execute requested workflows, diagnose failures, prevent abuse, and communicate material service changes.

Where the service runs

Rulith is built for users in multiple countries. The hosted service currently runs primarily on infrastructure in the United States. Our service providers may process data from other locations needed to operate their services. We do not currently offer a regional data-residency commitment.

Service providers and disclosure

Infrastructure and identity providers process data as needed to operate the service. We may disclose information when required by law or to protect users and the service.

Retention and deletion

Account deletion revokes active credentials and removes the account from normal use. Case records, receipts, security logs, and backups may remain where needed for service integrity, dispute handling, abuse prevention, or legal obligations. Account deletion does not promise immediate removal from every backup or audit record.

Your choices

Do not submit data you are not authorized to process. During public beta, use sample or non-sensitive data unless we have agreed in writing to your specific processing, retention, or location requirements. You can disconnect credentials and request account deletion in Console. Contact contact@rulith.com for privacy requests.

Changes

We may update this notice as the service evolves. Material changes will be posted here with a new effective date.