Privacy Policy

This policy describes what Rubiic LLC collects when you use Rubiic Media, why, and who processes it on our behalf. The short version: we collect what the product needs to work and understand how people find it. We advertise Rubiic on Reddit and Google; how we measure those ads, and your choices, are described below. We do not use your content to train models.

What we collect

• Account. Your email address and, if you sign in with Google, the name and avatar Google shares. Passwords are handled by our auth provider (Supabase) and stored only as salted hashes.
• Your content. The briefs, documents, media, and brand assets you provide, and the scripts, narration, imagery, and videos generated from them. Stored so the product can show them to you; visible to you alone.
• Billing. Your payment card is collected and stored by Stripe. We hold your Stripe customer id, subscription status, and a ledger of credit grants and spends — never card numbers.
• Usage. Product analytics (pages viewed, features used) via PostHog, tied to your account id. Service logs and AI pipeline traces, which can include the content of a build, kept for debugging and abuse prevention.

How we use it

To run the Service: build your videos, bill you correctly, email you when a build finishes or fails, keep your account secure, fix problems, and understand which parts of the product work. We email you about your account and your builds; we will not add you to marketing lists without asking first.

Who processes it for us

Rubiic runs on infrastructure and AI services that each receive only what their job requires: Supabase (database, auth, file storage), Vercel (web hosting), Fly.io and Amazon Web Services (video building and rendering), Stripe (payments), PostHog (analytics), Sentry (error reporting), Resend (transactional email), Langfuse (AI pipeline observability), and the AI providers that generate content — Anthropic (writing), Google (imagery and music), and ElevenLabs (narration). Your build content is sent to the AI providers to generate your video; on the API terms we use, they do not train on it.

Retention and deletion

We keep your account data and content while your account exists. Email support@rubiic.com to delete your account; we will delete your data within 30 days, except billing records the law requires us to keep and residual copies in backups that expire on their own schedule. You can also ask us for a copy of your data, or to correct it — whatever your jurisdiction, we honor these requests.

Advertising measurement and your choices

Google ad measurement depends on where you are. In the United States it is on unless you opt out: we tell you the first time, and you can opt out then or below at any time. Everywhere else it is off unless you allow it, and Google’s tag does not load before you do. We use the country your IP address points to only to decide which applies. When measurement is on, Google’s tag loads in your browser and uses advertising cookies to connect ad clicks with visits and confirmed new signups. Google receives technical information such as your IP address and browser information, ad identifiers, public page addresses, and an opaque signup identifier. We do not send Google your email, name, prompts, private conversation addresses, or creative content through this integration. Ad personalization and enhanced conversions are disabled. Google handles received data under its Privacy Policy. An opt-out lasts 12 months in this browser; an opt-in, or measurement under the United States notice, lasts 30 days before we ask or check again. Google’s cookies and received data follow its retention policies.

If you arrive from a Reddit ad, we ask before saving its click identifier for measurement. If you agree and confirm a new account, our server sends Reddit the click identifier, confirmation time, a random conversion identifier, and our public signup page address. Reddit uses this to attribute signups to our ads and measure their performance. We do not include your email, name, prompts, or video content in this transfer. We do not receive money for this information.

Declining or opting out does not affect your account or free credits. We treat Global Privacy Control and Do Not Track signals as an opt-out of both Google and Reddit measurement, wherever you are. You can turn either off below; sign in first to cancel any queued transfer for your account. This cannot recall an event already sent. For deletion requests, contact us using the address above. Reddit handles received data under its Privacy Policy.

The Reddit browser choice and any permitted click identifier expire after 30 days. Our restricted delivery records are deleted 30 days after successful delivery; failed records are kept for up to 90 days to diagnose delivery problems.

Cookies and browser storage

We use cookies to keep you signed in. Product analytics and the optional ad measurement choices use your browser’s localStorage. Google advertising cookies are set only while Google ad measurement is on, as described above. Reddit measurement connects an ad click with a confirmed signup only when you opt in.

Security, children, changes

Data is encrypted in transit and at rest with our providers, and access to production is limited to those who operate it. The Service is for adults 18 and over; we do not knowingly collect data from children. If we change this policy materially we will notify you by email or in the app before the change takes effect. Questions: support@rubiic.com. Terms of Service govern everything else.