Privacy Policy

We, Restoration Services Group LLC (“We” or “us”), are committed to protecting the privacy and security of personal information and to transparency about how we use personal information (also known as personal data) in connection with your use of the RubyRestore.ai website, product, and mobile apps (our “Services”). This Privacy Policy does not address our use of personal information outside the context of the Services.

For purposes of this Privacy Policy, we regard personal information as any information that relates to an identified or reasonably identifiable person.

Within the context of the Services, this Privacy Policy explains how we use and disclose personal information. It also discusses how you can control certain uses and disclosures of your personal information. We will update this Privacy Policy from time to time, or as our privacy practices change, to ensure it accurately describes how we use personal information. When we do so, we will update the dates above. We recommend that you review this Privacy Policy occasionally for the latest information. If we change our practices in a material way, we will provide appropriate notice to you, usually through an email or through a banner or pop-up within our Services.

If you have any questions regarding this Privacy Policy or our use of your information, please contact us using one of these methods:

• E-mail at privacy@rubyrestore.ai
• Postal mail at Restoration Services Group LLC, 2345 E. Thomas Rd., Suite 100-269, Phoenix AZ 85016

When you contact us, please let us know in which country and state you reside.

We limit the collection and processing of personal information to that which we need for our business purposes, as explained in the following table and the text that follows it:

In the table above, “General device, usage, and activity information” means information ordinarily logged when a user accesses a website, such as IP address, referral sources, browser or device characteristics, requested pages, and timestamps. “Detailed device, usage, and activity information” means additional information collected through analytics technologies about how a user interacts with the website, such as navigation paths, session and engagement information, and specific interactions with website content

Please be aware that we use third-party technologies, including cookies, pixels, and similar technologies, for analytics, marketing, and advertising purposes, such as understanding how visitors use our website, measuring the results of our advertising, and showing you our ads on other websites and services. As a result, these providers will receive personal information about you, as described in the table above, and may use it under their own terms and privacy policies. You can block or delete cookies through your browser settings, and you can opt out of interest-based advertising from many providers at https://optout.aboutads.info and through the ad settings that Google and Meta provide.

At present, we do not collect or process personal information considered to be “Sensitive Information,” “Sensitive Personal Information,” or “special category data” under various privacy laws in connection with our Services except as described in section 4.

In addition to the disclosures to third parties described in the table above, we may also disclose your personal information to:

• Processors/service providers. We disclose your personal information to third parties that provide services to us. We engage these third parties under contracts or terms of service that govern how they may use your personal information. These kinds of third parties typically provide website hosting, business, professional, administrative, marketing, advertising, artificial intelligence, or technical support functions for us. A list of our principal subprocessors, which may change from time to time, is available at https://rubyrestore.ai/subprocessors.
• Legal compliance recipients. We disclose personal information to the courts, governments, law enforcement agencies, litigants, and similar recipients when required by law.
• To advance or defend against legal claims. We may also disclose personal information to the extent needed to advance or defend legal claims.
• Successors. We may disclose personal information associated with a part of our business to a buyer, potential buyer, or other successor to our business.

We also may disclose personal information to third parties with your consent or at your direction.

Because no consensus has emerged on how to process a web browser’s “do not track” signal, we do not currently take any action in response to the signal. We do not process universal opt-out mechanisms such as the Global Privacy Control (GPC) and do not currently fall within the scope of any legal requirement to do so.

To generate responses and workflow output, the Services send prompts to third-party artificial intelligence providers. Those prompts can include your messages and relevant portions of your connected integration data. We send only what is needed to produce the requested output.

We do not sell your data, and we do not use it to train publicly available foundation models. Our AI providers process prompts under their own terms and policies, which may permit them to retain prompts for a limited period, for example to monitor for abuse. We choose and change AI providers from time to time. AI output can be inaccurate; see the accuracy disclaimer in our SaaS Terms and Conditions.

If you choose to connect a Google, Microsoft, or other third-party account to the Services, we may access or import information from your connected account as necessary to provide the integration and related features you request. Depending on the integration, we may import and maintain a copy of information from the connected account that is refreshed periodically, or we may access information from the connected account as needed without retaining a standing copy. Depending on the features you use and the permissions you grant, this information may include your account information, authorization tokens, email messages and attachments, message metadata, contacts, projects, claims, estimates, calendar information, and other information available through the applicable Google, Microsoft, or other third party’s APIs. We use this information only to provide, maintain, secure, and improve the connected-account features you use, consistent with the permissions you grant and the requirements of the applicable platform provider.

Google Workspace Data. RubyRestore.ai’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we use information obtained through Google Workspace APIs only as permitted by those requirements and do not use or transfer such information for advertising, to sell information to data brokers or other information resellers, to determine creditworthiness or for lending purposes, or to train or improve generalized artificial intelligence or machine-learning models. We permit human access to Google Workspace data only with your affirmative consent to access specific information or where otherwise permitted by Google’s Limited Use requirements.

Microsoft Data. We use information obtained through Microsoft APIs only for purposes permitted by the permissions you grant and applicable Microsoft requirements. We do not use or transfer information obtained through Microsoft APIs for advertising or marketing purposes. We limit our access to Microsoft data and permissions to those reasonably necessary to provide the connected-account features you request.

You may use the features of the Services to disconnect a Google or Microsoft account from the Services, and doing so prevents us from obtaining additional information from that account. You may also revoke permissions directly through your Google or Microsoft account settings. Where we maintain a copy of information imported from a connected account, we retain that information only for as long as necessary to provide the applicable features and otherwise in accordance with our SaaS Terms and Conditions.

If an individual whose data is in your connected systems contacts us with a privacy request, we will generally refer them to you as the controller and assist you as reasonably necessary.

We use reasonable administrative, technical, and physical safeguards to protect personal information in our possession from misuse, interference, loss, unauthorized access, modification, or disclosure. While we make every reasonable effort to help ensure the integrity and security of our network and systems, you should understand that no data storage system or transmission of data over the internet or any other public network can be guaranteed to be completely secure, accurate, complete, or current.

We also take reasonable steps so that the personal information we collect is sufficiently accurate, up-to-date, and complete for the purposes for which we process or disclose it.

We retain personal information for as long as is necessary for the purposes for which we use it, or for so long as required by law. What is necessary depends on the context and purpose of processing. We generally consider the following factors when determining how long to retain personal information:

• retention periods established under applicable law;
• industry best practices;
• whether the purpose of processing is reasonably likely to justify further processing;
• risks to individual privacy in continued processing;
• applicable data protection impact assessment;
• information systems design considerations/limitations; and
• the costs associated with continued processing, retention, and deletion.

Some integrations maintain a stored copy of data imported from the connected service. If you disconnect one of these integrations, we delete the stored copy of that integration’s data 90 days after disconnection.

Please be aware that your personal information will be stored and processed in the United States, where our servers are located.

We know that many people are concerned about the safety of children using the Internet. Our Services are not directed at children and we do not knowingly collect any personal information from those under the age of 16.

If we discover (or are informed) that we have collected personal information from a visitor under the age of 16, we will promptly delete such information.

Depending on the law in the jurisdiction where you live, you may have certain rights regarding your personal information under the law. To exercise your rights, please submit a request by contacting us through any of the means outlined above.

Only you, or someone legally authorized to act on your behalf, may make a request related to your personal information. We will verify that any requests from persons other than you have your legal authorization. You may also make a request on behalf of your child.

Your request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or a legally authorized representative; and
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

You may also appeal the decision we make on your request by using the contact information below. When you contact us to appeal, please tell us why you believe we erred in responding to your request. We will respond to your appeal in accordance with the timelines set forth in applicable law.