Who is responsible
RustaBase (registration details will be published here once available) is responsible for personal data about our customers and website visitors. For data your own users store in your projects, you are responsible and we act only on your instructions (see the Data Processing Agreement).
What we collect
- Account details: name, email, workspace name, and sign-in method.
- Billing details: plan, invoices and payment status. Card details are handled by our payment provider; we never see full card numbers.
- Usage and technical data: IP address, browser, pages visited in the console, API request counts, and error logs.
- Support messages and anything you choose to send us.
Why we use it
- To provide, secure and bill the service (contract).
- To prevent abuse and keep the platform safe (legitimate interest).
- To send service and security notices (contract). Product news only if you opt in (consent).
- To meet tax, accounting and legal duties (legal obligation).
What we never do
- We do not sell personal data.
- We do not use your project data for advertising or AI training.
- We do not show infrastructure details of other customers to you, or yours to them.
Who we share it with
Only trusted providers that help us run RustaBase, such as hosting, email delivery, payments and error monitoring, under contracts that protect your data. We may disclose data when the law requires it, and we will tell you unless we are legally prevented.
International transfers
RustaBase serves customers worldwide and runs infrastructure in several regions. Your project data stays in the region you choose. Account data may be processed in other countries; where required we use safeguards such as the EU Standard Contractual Clauses.
How long we keep it
Account data is kept while your account is open and for up to 30 days after closure. Billing records are kept as long as tax law requires. Logs are kept for a limited period based on your plan.
Your rights
Depending on where you live (for example under the GDPR, UK GDPR or California law), you can ask to access, correct, delete or export your personal data, or object to certain uses. Email [email protected]. You can also complain to your local data protection authority.
Security
We use encryption in transit, isolated project environments, access controls, private networking between our servers, and regular backups. No system is perfectly secure; we will notify affected customers of a personal data breach without undue delay.
Children
RustaBase is not directed at children under 16, and we do not knowingly collect their data.
Contact
Questions about privacy can be sent to [email protected]. We aim to reply within 5 business days.