Overview

Rubuz One is made and run by Rubuz LLC (“we”, “us”, or “our”) and sold by hosting providers to their own VPS customers. This policy covers three groups of people:

Customers who use the Rubuz One console.
Hosting providers who sell Rubuz One.
Visitors to one.rubuz.com.

Customers: what we keep

Account data: your name, email address, and a one-way hash of your password (never the password itself), plus the same for people you invite to your account.
Your provider and plan: which hosting provider sold you Rubuz One, and the plan you are on.
Server data: the address, SSH port and user of each VPS you connect, its operating system, and the host key it presented when you connected it.
Server access keys: an SSH key made for each server you connect. Its private half is encrypted before it is stored, and is never shown to anyone.
Operational data: the apps, domains, backup schedules and settings you configure; resource metrics read from your servers; and a log of actions taken in your account.
Integration credentials: credentials you provide for services such as S3-compatible storage or GitHub, used only to do what you set them up for.
Usage and security data: sign-in times, IP addresses and device information, used to keep your account secure.

We do not take payment from you, so we hold no card or bank details. Your provider bills you.

Customers: what stays on your servers

Your application files, databases, uploads and the values of your apps’ environment variables live on your servers. Rubuz One reads them over SSH when you ask it to act on them and does not keep a copy. Backups are written from your server to the storage you choose.

Your provider sells and bills Rubuz One, so we share with it only what that takes: your name and email address, your plan, and which of its VPSs are connected to your account. We do not share your apps, settings, metrics, credentials or anything on your servers.

What your provider does with your data is covered by its own privacy policy.

Hosting providers: what we keep

For hosting providers that sell Rubuz One, we keep the business contact details of the people we deal with, the company’s details, the agreement with us, and records of what the provider buys from us and pays.

Visitors to one.rubuz.com

This site sets no cookies and keeps no personal data about its visitors. When you write to us, through the contact form or by email, we keep your name, email address and message to answer you. Messages from the contact form reach us through our email delivery provider.

How we use data

We use the data above only to:

Run the Rubuz One console for customers.
Work with hosting providers to sell and bill Rubuz One.
Send account and security emails, such as password reset links.
Answer questions and support requests.
Keep the service secure.

We do not sell data, and we do not use it for advertising.

Cookies

The console uses a sign-in cookie to keep you signed in. It does not follow you to other sites. This site, one.rubuz.com, sets no cookies.

Service providers

We rely on a small number of providers to run Rubuz One: hosting and a managed database, network and security services, and email delivery. They process data only on our behalf and only as needed to provide the service. See GDPR Compliance for where data is processed.

Data security

Traffic to Rubuz One is encrypted, passwords are stored only as hashes, and server access keys are encrypted at rest.

Retention and deletion

We keep a customer’s data for as long as the account exists. When you remove a server, its access key and records are deleted. When you ask us to delete your account, its data is deleted with it. We keep a hosting provider’s records for as long as its agreement with us lasts, and billing records only as long as tax law requires.

Your rights

You can access, correct, export and delete your personal data, and object to or restrict how we use it. You can also complain to your data protection authority. To use any of these rights, email us. For billing data your provider holds, ask your provider.

Contact us

Questions about this policy: hello@rubuz.com.

Privacy Policy