1. Who controls information
The Ruvio operating entity will act as controller for account, billing, website and product-analytics data. Customers generally control the business-contact data they submit, while Ruvio processes it to provide the service.
2. Information we handle
We process account identifiers, workspace membership, billing status, usage and security events, submitted names, companies and domains, candidate attempts, conservative statuses, generation instructions, drafts, public-source provenance, suppression records and delivery events. For website and advertising measurement, we may also process IP-derived location, browser and device information, cookie or similar identifiers, referring pages, ad-click identifiers, page interactions and conversion details such as plan, value and currency. Provider keys are stored separately as secrets.
3. Sources
Information comes from customers, account providers, payment and delivery providers, verification services, authoritative public business sources, advertising providers and technical interactions with the service. Publicly listed addresses remain labelled separately when they cannot be verified.
4. Purposes and legal grounds
We use information to perform contracts, authenticate users, provide verification, enforce quotas, secure the service, prevent misuse, handle billing and comply with law. We use limited measurement to understand service use, attribute advertising, measure conversions, prevent advertising fraud and improve campaigns. Where law requires consent for advertising storage, identifiers or personalized advertising, consent is the legal basis; in other contexts we may rely on proportionate legitimate interests where permitted. Customers control their prospecting and outreach purposes and must determine and document their own lawful basis and notices.
5. Cookies, analytics and advertising
When enabled, Meta and Google advertising tools may receive page visits, technical and ad-click identifiers, and events such as completed registration, checkout initiation and subscription purchase. Server purchase events may include the transaction ID, actual value and currency, consent status, ad-click identifiers, and a normalized, SHA-256-hashed customer email for matching and deduplication. We do not include submitted lead names, candidate email addresses, verification attempts, generated content or message content in advertising events. Optional advertising tools are subject to the choice shown on this site.
6. Providers and sharing
Necessary information may be shared with infrastructure, authentication, verification, payment, email-delivery, analytics, advertising, monitoring and support providers. Advertising-measurement recipients include Meta and Google when their respective tools are configured. Their handling is also described in the Meta Privacy Policy and Google’s information-from-partners notice.
7. International transfers
Providers may process information outside the visitor’s country. Before launch, Ruvio must identify its operating entity, active subprocessors, processing locations and the applicable contractual or other safeguards for restricted international transfers.
8. Retention
Account, verified-lead and generated-draft records are retained while the workspace is active and for a limited period afterward. Verification, public-web research and identical-draft caches expire after seven days. Guest sessions expire automatically. Audit, billing, suppression and security records may use different periods. Advertising event data is retained only as needed for attribution, security and campaign measurement, subject to provider settings and legal requirements.
9. Rights and choices
Depending on location, people may request access, correction, deletion, restriction, portability or objection, withdraw consent, opt out of targeted advertising or certain sharing, and complain to a regulator. Use the advertising choice offered on this site to accept, reject or later change optional advertising measurement. Browser controls, Meta Ad Preferences and Google My Ad Center provide additional choices. Withdrawing consent does not affect processing that was lawful beforehand.
10. Targeted-advertising disclosures
Sharing technical identifiers and conversion events with advertising providers may be treated as targeted advertising, cross-context behavioral advertising, “sharing” or a “sale” under some laws, even though Ruvio does not sell this information for money. Before using these tools in a jurisdiction that grants an opt-out right, Ruvio must provide and honor the required opt-out method and recognized preference signals where applicable.
11. Automated processing
Models may assist with parsing, public company research and user-directed email drafting. Generated content must be reviewed before sending and may contain mistakes. Models do not decide whether a mailbox is usable: verification promotion follows defined provider and random-control rules, and ambiguous results remain unusable.
12. Security and contact
We use access controls, encryption, scoped keys, audit records and retention limits appropriate to the service. The operator’s privacy contact, registered address, representative and data-protection contact must be supplied before launch.