Privacy Policy

Data controller

RUBIN TEKNOLOJİ ANONİM ŞİRKETİ ("Rubin", "we"), Yeşilköy Mah. Havaalanı Cad. Dış Hatlar No: 2/5 İç Kapı No: 20, Bakırköy/İstanbul, Türkiye. Tax office: Bakırköy, tax number 7352330194. Contact: info@rubin.zone.

Rubin is a workspace that companies use through their own accounts. For the content a customer company brings into Rubin, that company decides what is processed and Rubin processes it on the company's behalf.

Data we process

• Account data: name, email address, company, role, team memberships, sign-in records and settings.
• Workspace content: documents you upload, chats, workbooks, plans, tasks, comments and feedback.
• Data from connected sources: when a company administrator connects a source such as Google Drive, Microsoft 365, an accounting or point-of-sale system, or Meta (Instagram), the files and records the administrator selects in that source.
• Usage and technical data: request logs, IP address, browser and device information, error reports and usage counts needed to run and secure the service.
• Support and communication: messages you send us and the emails we send you about your account.

Instagram and Meta data

When a company connects its Instagram professional accounts through Meta, Rubin reads only the accounts and ad accounts the company selects in Meta's login window, with read-only permissions. This can include profile information, posts, post, story and account insights, aggregated audience demographics, comments and mentions on those accounts, and the performance of the selected ad accounts.

Rubin does not publish, comment, send messages or manage ads on these accounts, does not read personal (non-professional) accounts, and does not sell this data or use it for advertising. It is used only to provide the service to the company that connected it, in line with Meta's Platform Terms. The company can remove the connection at any time; see our data deletion instructions at rubin.zone/data-deletion.

Why we process it and on which legal basis

Data is collected electronically: directly from you, from your company's administrators, and from the sources your company connects.

• To provide the service, including answers and reports that Rubin's agents produce from the customer's own data — performance of a contract (KVKK Art. 5/2-c).
• To keep the service secure, prevent abuse and keep audit records — legitimate interest and legal obligations (KVKK Art. 5/2-ç and 5/2-f).
• To answer support requests and send account emails — performance of a contract (KVKK Art. 5/2-c).
• To meet obligations under tax, commercial and other laws — legal obligation (KVKK Art. 5/2-ç).

AI processing

To answer questions and produce outputs, the relevant workspace content is sent to the AI models Rubin uses: models provided by Anthropic and models Rubin runs on cloud GPU providers. Your content is not used to train public AI models.

Who we share it with and international transfers

We do not sell personal data. We share it only with service providers that process it on our behalf, under contract:

• Google Cloud — hosting and storage, in the Frankfurt, Germany region.
• Cloudflare — website delivery and network protection.
• Anthropic — AI models (United States).
• Cloud GPU providers — running AI models (United States, Canada or the European Union).
• Google Workspace — email.

International transfer

Because these providers operate outside Türkiye, personal data is transferred abroad. We carry out these transfers with the safeguards set out in Article 9 of KVKK, such as standard contracts, and, for data from the European Union, with the safeguards the GDPR requires. Authorities may also receive data where the law requires it.

How long we keep it

We keep workspace and account data while the customer's account is active. After the account is closed, or when the customer asks, we delete it within 30 days, except data we must keep longer by law (for example, invoices and records required by tax law). When a company removes a connected source, we delete the data we stored from that source within 30 days. Security logs are kept for up to 12 months.

Your rights

Under Article 11 of KVKK you may ask us whether your personal data is processed, request information about it, learn the purpose of processing and whether it is used accordingly, learn the third parties it is transferred to in Türkiye or abroad, ask for incomplete or incorrect data to be corrected, ask for it to be deleted or destroyed, ask for these actions to be notified to third parties, object to a result against you that arises solely from automated analysis, and claim compensation for damage caused by unlawful processing.

Send your request to info@rubin.zone or in writing to the address above. We answer within 30 days. If your data is processed through your company's Rubin workspace, we may forward your request to your company.

Cookies

Rubin uses only the cookies needed to keep you signed in, protect your session and remember your language. We do not use advertising or analytics cookies.

Changes

We will update this page when our processing changes and show the date of the latest change above.