Privacy Policy

This policy explains what personal data Intelligetic ("RuleBindery," "we," "us") collects when you use RuleBindery, why, and what rights you have over it. For a plainer, non-legal walkthrough, see the Data Handling page.

Data we collect

Account data. Name, email address, and authentication credentials (or your Google account identifier, if you sign in with Google) — needed to create and secure your account.

Project content. The rules text, entities, assets and review comments you author. This is stored on our servers for every account, including free ones, so that your work is not tied to one browser or one machine — see Data Handling for what that means in practice.

Payment data. Billing is handled entirely by Polar.sh, acting as merchant of record. We do not receive or store your card details; Polar shares with us only what's needed to manage your subscription (plan, status, and billing history). If you answer Polar's optional question about why you are cancelling, Polar also shares the reason you picked and any comment you wrote, which we keep with your subscription record to understand why people leave.

Usage data (opt-in). If you enable telemetry, feature-usage counters and crash reports. Crash reports are scrubbed of document content, file paths, and entity names before transmission.

Aggregate product analytics. Account-level events (signup, trial start, first export, tier change) via PostHog. A tier change caused by a cancellation includes the cancellation reason you picked, if any, but never your comment. A signup event also records which of our public pages' sign-up link you followed, if any (for example, a blog post), so we can tell which pages lead people to RuleBindery; nothing is stored in your browser for this. Never document content or entity names.

Email preferences and newsletter. Whether you have turned off getting-started tips and trial reminders, a log of which of those we have sent you (so none is sent twice), and — only if you subscribe to the newsletter — your email address with Resend, together with when and where you gave your consent (for example, the sign-up page or a blog post's form).

Marketing-site analytics. On rulebindery.com's public pages only — never inside the app once you're signed in. Aggregate traffic analytics (page views, visits, referrers) via Cloudflare Web Analytics, derived from Cloudflare's own edge network rather than a script or cookie. Session recordings and heatmaps via Microsoft Clarity, so we can see how visitors use pages like pricing; Clarity is configured not to set cookies and automatically masks form inputs and other sensitive on-page content before it leaves your browser.

Why we collect it

To provide and secure your account and the service itself
To process payments and manage your subscription
To provide customer support when you contact us
To send account and security emails, such as email verification, password resets, sign-in changes and invitations — these are part of the service and can't be turned off
To send getting-started tips and reminders about your free trial, as part of the account you created; every one has an unsubscribe link, and you can also turn them off in Settings
To send our newsletter, only if you ask for it — by ticking the box at sign-up, in Settings, or with the form on our site and the confirmation link we email you
To understand feature usage and fix problems, where you've opted in to telemetry
To meet legal and tax obligations (for example, records Polar maintains for VAT/GST)

We share data only with the service providers needed to run RuleBindery, each bound by their own data-processing terms:

Provider	Purpose
Neon	Database hosting
Cloudflare R2	File and asset storage
Polar.sh	Payment processing (merchant of record)
Resend	Email: account and security emails, getting-started tips and trial reminders, and the newsletter for those who subscribe (payment receipts come from Polar)
PostHog	Aggregate product analytics
Cloudflare Web Analytics	Marketing-site traffic analytics (rulebindery.com only)
Microsoft Clarity	Marketing-site session recordings & heatmaps (rulebindery.com only)
Cloudflare Turnstile	Telling people from bots on the newsletter sign-up form (rulebindery.com only; loads only when you start filling in the form)

We do not sell your personal data, to anyone, ever.

Data retention

Account and project data: retained while your account is active, and for 30 days after a deletion request while the deletion completes.
Deleted projects: when an owner deletes a project it moves to "Recently deleted" and can be restored for 30 days; after that it is permanently deleted, together with its stored files.
Deleted workspaces: when an owner deletes a workspace and confirms by email, it is locked and permanently deleted 14 days later, together with everything in it. Until then an owner can cancel the deletion, and every member is emailed when it is scheduled.
Backups: we keep encrypted backups of our database for 30 days for disaster recovery only. Data you have deleted can therefore remain in a backup for up to 30 days after it is removed from the live service, and if a backup is ever restored, deletions made since are applied again.
Deletion records: when a workspace is deleted or its deletion is cancelled, we keep a minimal record — its identifier, name, when the deletion was requested and by which account — for 12 months, to help with support and billing questions and to re-apply the deletion if a backup is ever restored. We then remove it. A deletion request that is never confirmed is discarded within days.
Server-processed export payloads: deleted within 24 hours of job completion.
Email log: the record of which getting-started and trial emails we sent you is deleted after 180 days, and with your account.
Newsletter: your subscription and the record of your consent are kept until you unsubscribe or delete your account. Unsubscribing keeps your address on a do-not-send list so it isn't emailed again; deleting your account removes it.
Crash reports and telemetry: retained only as long as needed to diagnose and fix the issue they relate to.
Trial fraud prevention: to keep our 14-day free trial free for everyone, we keep a minimal record — your normalized email address and the date a trial was redeemed — to prevent the same person from repeatedly claiming new trials. This one narrow record survives account deletion; nothing else does.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can:

Export your full project data at any time, from within the app, at no cost — including after cancellation
Delete your account self-service (Settings → Delete account, confirmed by an emailed link), which purges your cloud-held data within 30 days (see Data retention above for the one narrow fraud-prevention exception)
Delete a workspace (Settings → Delete workspace, owners only) or a single project (Project settings → Delete project, owners and admins) — see Data retention above for how long each takes
Unsubscribe from getting-started tips, trial reminders or the newsletter at any time, from the link in any of those emails or in Settings → Email
Email privacy@rulebindery.com for anything the app doesn't yet handle self-service, including access, correction, and deletion requests

If you're in the EEA, UK, or Switzerland, you also have the right to lodge a complaint with your local data protection authority.

International transfers

Our infrastructure providers may process data outside your country of residence. Where that involves a transfer out of the EEA/UK, we rely on the providers' own standard contractual safeguards.

Children

RuleBindery is not directed at children, and we don't knowingly collect personal data from anyone under 16.

Changes to this policy

If we make a material change, we'll update the "Last updated" date above and, where required, notify you directly.

Contact

Questions about this policy, or requests about your personal data: privacy@rulebindery.com. For anything else, contact us.