Privacy Policy
Rubiscape demonstrates commitment to safeguarding personal information using rigorous enterprise governance standards. This document explains collection practices, purposes, and user control mechanisms in accessible language.
1. Who We Are
Rubiscape is a Decision Intelligence platform operated by Inteliment Technologies Private Limited, incorporated under the Companies Act, 2013 and based in Pune, Maharashtra, India.
Policy Coverage:
- Rubiscape website (www.rubiscape.com and subdomains)
- SaaS platform for registered enterprise users
- Communications, demos, trials, and organized events
For enterprise customers: organizational data processing agreements govern personal data submitted through the platform. This policy covers individuals engaging with the public website and marketing activities.
Data Fiduciary (Controller):
Inteliment Technologies Private Limited
Pune, Maharashtra 411 xxx, India
Email: privacy@rubiscape.com
2. What Personal Data We Collect
Personal data collection occurs only with lawful basis and defined purpose.
2.1 Data You Provide Directly
| Category | Examples | When Collected |
|---|---|---|
| Identity data | Full name, job title, designation | Demo requests, trial sign-ups, contact forms, event registrations |
| Contact data | Work email, phone number, company name | All form submissions |
| Professional data | Industry, company size, use case, technology stack | Demo qualification forms, ROI calculator |
| Account data | Username, password (hashed), login history | Platform accounts |
| Communication data | Email content, chat transcripts, support tickets | Correspondence with Rubiscape |
| Financial data | Billing name, address, GST/PAN | Enterprise agreements via secure process |
2.2 Data Collected Automatically
| Category | Examples | Purpose |
|---|---|---|
| Usage data | Pages visited, time on page, click paths, scroll depth | Content and UX improvement |
| Device & browser data | Browser type, OS, screen resolution, device type | Compatibility and performance |
| Network data | IP address (anonymised where possible), approximate location | Security, fraud prevention, analytics |
| Session recording | Mouse movements, clicks, form interactions (anonymised) | UX research via Zoho PageSense with consent |
2.3 Data from Third Parties
Limited data received from:
- CRM and enrichment tools for prospective enterprise account research
- Partner referrals (business contact details shared with knowledge)
- Public sources (LinkedIn, company websites, press releases) for enterprise sales prospecting
3. How We Use Your Personal Data
Personal data processing occurs only for specified, explicit, and legitimate purposes.
| Purpose | Lawful Basis | Data Used |
|---|---|---|
| Responding to demo, trial, or contact requests | Consent / Legitimate interest | Identity, contact, professional data |
| Sending weekly Decision Intelligence digest (newsletter) | Consent | Email address |
| Managing platform account | Contract | Account data, identity data |
| Providing customer support | Contract / Legitimate interest | Identity, contact, communication data |
| Sending product updates, feature announcements, security notices | Contract / Legitimate interest | Email address |
| Marketing communications (events, webinars, content) | Consent | Email address, name |
| Analysing website usage for platform and content improvement | Legitimate interest (consent for tracking cookies) | Usage data, device data |
| Session recording and heatmap analysis | Consent | Session data (anonymised) |
| Fraud prevention and security | Legal obligation / Legitimate interest | Network data, account data |
| Complying with legal obligations (tax, regulatory, court orders) | Legal obligation | As required |
Data NOT Used For:
- Automated decision-making that produces legal or significant effects
- Selling data to third parties
- Behavioural advertising to external platforms
5. Data Retention
Personal data retention occurs only as long as necessary for the collection purpose:
| Data Category | Retention Period |
|---|---|
| Website enquiry / contact form data | 3 years from last interaction |
| Newsletter subscribers | Until unsubscribe + 30 days |
| Platform account data | Duration of contract + 5 years post-termination |
| Support and communication records | 5 years |
| Marketing interaction data (clicks, opens) | 2 years |
| Website analytics data | 14 months (Google Analytics default) |
| Session recordings | 90 days |
| Financial / billing records | 8 years (Indian Companies Act requirement) |
6. Your Rights
Under DPDP Act, 2023 and applicable data protection law:
- Right to information: Request what personal data is held and how it is used.
- Right of access: Request a copy of personal data in a readable format.
- Right to correction: Request correction of inaccurate or incomplete personal data.
- Right to erasure: Request deletion of personal data where no lawful basis exists.
- Right to grievance redressal: Raise a complaint or grievance with our designated Privacy Officer.
- Right to withdraw consent: Withdraw consent at any time without affecting the lawfulness of prior processing.
- Right to nominate: Nominate another individual to exercise rights on your behalf during death or incapacity.
Exercise Rights Process: Submit a request to privacy@rubiscape.com with your name, contact details, and a clear description of the request. Response within 30 days of receipt.
For unsatisfactory responses, contact the Data Protection Board of India once established under the DPDP Act, 2023.
7. Data Security
Rubiscape maintains ISO 27001-certified information security management practices.
Technical and organisational measures include:
- Encryption in transit: TLS 1.2+ for all web traffic; encrypted APIs
- Encryption at rest: AES-256 for data at rest on cloud infrastructure
- Access control: Role-based access control (RBAC) with least-privilege principles; MFA for all staff
- Audit trails: All personal data access is logged and auditable
- VAPT: Regular vulnerability assessment and penetration testing by CERT-IN empanelled auditors
- Incident response: Documented breach notification procedures; regulatory notification within 72 hours where required
No internet-based system achieves complete security. Users should employ strong, unique passwords and report suspected security issues to security@rubiscape.com.
8. International Data Transfers
Rubiscape is headquartered in India. Some service providers (Google, certain cloud infrastructure providers) may process data outside India.
International transfer safeguards:
- Standard contractual clauses (SCCs) with providers in jurisdictions without an adequacy determination
- Binding corporate rules where applicable
- Consent where required
9. Children's Privacy
Rubiscape is a B2B enterprise platform not directed at individuals under 18. Personal data from minors is not knowingly collected. Contact privacy@rubiscape.com if inadvertent minor data collection occurs; prompt deletion follows.
10. Changes to This Policy
Policy updates reflect changes in practice, technology, or legal requirements.
Change notification includes:
- "Last Updated" date update at the top of the page
- Email notification to registered users for material changes
- Prominent website notice for significant updates
Continued platform use after the revised policy's effective date constitutes acceptance.
11. Contact Us
Privacy Officer:
Inteliment Technologies Private Limited
Pune, Maharashtra, India
Email: privacy@rubiscape.com
Additional contacts:
- Website contact form: www.rubiscape.com/contact
- General enquiries: hello@rubiscape.com