Ruva

Privacy Policy

Effective Date: April 7, 2026

Welcome to Ruva (ruva.so). Your privacy is important to us. This Privacy Policy explains how Ruva ("we," "us," or "our") collects, uses, shares, and protects your personal information when you use our AI-powered creative design platform and related services (collectively, the "Service").

By using Ruva, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and authentication credentials. If you sign up through a third-party provider (e.g., Google, GitHub), we receive your basic profile information from that provider.

Content and Design Data

We collect and store the content you create, upload, or import through Ruva, including brand kits (colors, fonts, logos, brand voice, visual style), design projects, templates, images, and other creative assets.

Usage Information

We automatically collect information about how you interact with the Service, including pages visited, features used, actions taken, timestamps, device type, browser information, IP address, and referring URLs.

Payment Information

When you subscribe to a paid plan, payment information is collected and processed by our payment provider, Stripe. We do not store your full credit card number or bank account details on our servers.

AI Processing Data

When you use our AI-powered features (e.g., brand extraction, design generation, smart resize), we process your inputs (prompts, URLs, brand data) to generate outputs. We may retain metadata about AI interactions to improve the quality and reliability of our Service.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process your designs, brand kits, and creative projects
  • Power AI features including design generation and brand extraction
  • Process payments and manage subscriptions
  • Send transactional communications (e.g., account verification, billing)
  • Analyze usage patterns to improve user experience and product features
  • Detect, prevent, and address technical issues and security threats
  • Comply with legal obligations

3. How We Share Information

We do not sell your personal information. We may share your information with:

  • Service Providers: Third-party vendors who assist us in operating the Service, including Cloudflare (CDN and security), Vercel (hosting), Neon (database), Stripe (payments), and AI model providers (for design generation and brand extraction features).
  • Organization Members:If you are part of an organization on Ruva, other members of your organization may access shared brand kits, projects, and designs in accordance with your organization's settings.
  • Legal Requirements: When required by law, regulation, legal process, or governmental request, or to protect our rights, property, or safety.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or compliance purposes. Design assets and brand kit data are deleted upon account deletion.

5. Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS/SSL), encryption at rest for sensitive data, secure access controls, and regular security reviews. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Your Rights

For All Users

You have the right to:

  • Access, update, or delete your personal information through your account settings
  • Export your data (brand kits, designs, and assets)
  • Close your account at any time

For EEA/UK Residents (GDPR)

If you are located in the European Economic Area or the United Kingdom, you have additional rights under the GDPR, including the right to access, rectification, erasure, restriction of processing, data portability, and the right to object to processing. Our legal basis for processing your data is your consent, the performance of our contract with you, and our legitimate business interests.

For California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of its sale (we do not sell personal information). To exercise these rights, contact us at support@ruva.so.

7. Cookies and Tracking

We use essential cookies to authenticate your session and maintain your preferences. We may also use analytics tools to understand how the Service is used. You can control cookie preferences through your browser settings. Our Service does not respond to "Do Not Track" signals.

8. Children's Privacy

Ruva is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete it promptly. If you believe a child has provided us with personal data, please contact us at support@ruva.so.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. Our servers and service providers operate in various locations worldwide. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) to ensure your data receives adequate protection in accordance with applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on this page with a new effective date. We may also notify you via email for significant changes. Your continued use of the Service after changes become effective constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: support@ruva.so
Website: ruva.so