This Privacy Policy explains how Indaplan Kft. processes personal data when you use Rubedyne at rubedyne.com (the "Service").
1. Controller
Indaplan Kft., seat: 1039 Budapest, Batthyány utca 35/B, Hungary; company registration number 01-09-376317; tax number 28839833-2-41; e-mail: support@rubedyne.com.
2. What we process, why, and on what legal basis
| Data | Purpose | Legal basis (GDPR Art. 6) | Retention |
|---|---|---|---|
| Name, e-mail, profile picture, sign-in method (e-mail, Google or Facebook) | Account and sign-in | Contract (b) | Until the account is closed |
| Team membership and roles | Team features | Contract (b) | Until removed from the team or the account is closed |
| Billing name, address, VAT/tax number, invoices | Payment and invoicing | Legal obligation (c) — accounting law | 8 years after the year of issue (Act C of 2000 on Accounting) |
| Plan, quota and usage records | Providing and metering the Service | Contract (b) | Until the account is closed, then 1 year |
| Content you create, including any personal data in it | Providing the Service | Contract (b) | Until you delete it or the account is closed |
| Support tickets and correspondence | Answering requests | Legitimate interest (f) | 3 years after the ticket is closed |
| Technical logs (IP address, browser, errors) | Security and troubleshooting | Legitimate interest (f) | 30 days |
| Analytics data | Understanding how the Service is used | Consent (a) — cookie banner | See Section 6 |
Where you upload personal data of other people (for example Responsible Persons, safety assessors, suppliers or team members), we process it on your behalf as a processor and you are the controller for that data. A data processing agreement under Article 28 GDPR is concluded separately on request (support@rubedyne.com).
3. Processors
We use the following service providers. They process personal data only on our instructions.
| Provider | Purpose | Location |
|---|---|---|
| Auth0 (Okta, Inc.) | Sign-in | EU tenant |
| Stripe Payments Europe Ltd. | Payments | EU / USA |
| KBOSS.hu Kft. (számlázz.hu) | Invoicing | Hungary |
| Cloudinary Ltd. | Storing images and documents | USA |
| Vercel Inc. | Hosting the website; Analytics and Speed Insights after consent | USA / global edge |
| Google Ireland Ltd. (Google Analytics) | Analytics, only after consent | EU / USA |
| Resend (Plus Five Five, Inc.) | Transactional e-mail | USA |
| OpenRouter, Inc. and the model providers it routes to (Anthropic, OpenAI, Google, Alibaba Qwen, TypeSafe) | AI features | EU endpoint for most features; the global endpoint for TypeSafe's Jev model, which has no EU endpoint |
| OCR.space (a9t9 software GmbH) | Reading ingredient lists from images you upload | EU |
| DeepL SE | Translating regulatory reference text in PIF exports — receives no personal data | Germany |
Our own application servers and database run on virtual private servers rented from Rackforest Zrt. in Hungary.
4. Transfers outside the EEA
Where a processor is located outside the European Economic Area, the transfer is based on the EU-US Data Privacy Framework where the recipient is certified, or on the European Commission's Standard Contractual Clauses.
5. Your rights
You have the right to access, rectify and erase your personal data, to restrict or object to processing, to data portability, and to withdraw consent at any time without affecting earlier processing. Write to support@rubedyne.com; we answer within one month.
If you believe we process your data unlawfully, you may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, 1055 Budapest, Falk Miksa utca 9-11, www.naih.hu) or go to court.
6. Cookies
| Cookie | Purpose | Type | Lifetime |
|---|---|---|---|
appSession |
Keeps you signed in | Strictly necessary | Session / up to 7 days |
skinlyzer_cookie_consent |
Remembers your cookie choice | Strictly necessary | 1 year |
nav-context |
Remembers which product area you used last | Functional | 1 day |
domain-mode |
Routing for legacy domains | Strictly necessary | Session |
| Stripe cookies | Fraud prevention during checkout | Strictly necessary | Set by Stripe |
_ga, _ga_* |
Google Analytics | Analytics — only after consent | Up to 2 years |
Vercel Analytics and Speed Insights do not set cookies but are also loaded only after you accept analytics. You can change or withdraw your choice at any time with the Cookie settings button at the end of this page; the page reloads and the banner asks again.
The Service also keeps a few preferences in your browser's local storage (for example your colour theme, the split-view width and recent searches). They never leave your device.
7. Security
We use encrypted connections and role-based access control.
8. Changes
We announce changes to this Policy in the Service. The version and effective date are shown at the top of this page.
9. Contact
See also our Terms & Conditions. Last updated 1 October 2026.
Change or withdraw your cookie choice: