Privacy Policy

Last updated January 20, 2026

Last Updated: January 20, 2026

RalphBlaster LLC ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy describes how we collect, use, and share your personal data when you use our website and services (collectively, the "Platform").

This Privacy Policy applies only to the extent required by applicable data protection laws, including the EU General Data Protection Regulation (EU GDPR), the UK GDPR, and other relevant laws. Certain provisions in this Policy apply only to users covered by these regulations.

1. Who This Policy Applies To

This Policy applies to:

• Visitors and users located in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, whose data is processed in connection with RalphBlaster services
• Customers or users outside those regions, only to the extent required by local data protection laws or international data transfer laws (e.g. SCCs, IDTA)

If you are not located in the EEA/UK/Switzerland, and your use of RalphBlaster does not involve international data transfers from those jurisdictions, some rights and disclosures in this Policy may not apply to you.

2. Information We Collect

We collect the following types of information:

• Name, account email, billing email, other billing info provided to us, password (hashed), workspace details, preferences, time zone, preferred language, and user invitation relationships
• IP address, browser type, device information, and usage logs
• Support conversations, invoices, and payment data (via Stripe)
• Agent execution logs (ralph_logs field in tasks)
• PRD generation logs (prd_logs field in tasks)
• Job output data (output field in rb_jobs)
• Job error messages (error_message field in rb_jobs)
• Task titles and descriptions
• Project names and system paths
• Git branch names
• Custom instructions
• Reference image files (stored in Active Storage)
• API token metadata (not the token value itself)

3. How We Use Your Information

We use personal data for the following purposes:

• To provide and maintain the RalphBlaster platform
• To troubleshoot, secure, and improve the service
• To handle billing and account management
• To comply with legal and regulatory obligations

We do not sell your personal data.

4. Legal Bases for Processing (EU/UK Users Only)

If you are located in the EEA or UK, we process your personal data only when permitted by law, including:

• When you have given consent
• When necessary to perform a contract
• To comply with legal obligations
• For our legitimate interests (e.g., service improvement, fraud prevention)

5. Data Sharing and Sub-Processors

We use trusted third-party service providers ("Sub-Processors") to support our services. These include:

Render.com, AWS, New Relic, Crisp, Profitwell, Stripe, PostHog, OpenAI, Anthropic, and Slack (for internal support only).

All Sub-Processors are contractually bound to handle your data with care and in accordance with applicable laws.

6. International Transfers

If we transfer personal data from the EEA, UK, or Switzerland to the United States or other countries, we rely on:

• EU Standard Contractual Clauses (SCCs)
• The UK International Data Transfer Agreement (IDTA) or Addendum
• The EU-U.S. Data Privacy Framework (where applicable)

These mechanisms apply only if your data is subject to GDPR/UK GDPR. Otherwise, we process data according to U.S. laws and industry best practices.

7. Your Rights (EU/UK/Swiss Users Only)

If you are in a GDPR-covered region, you may have the right to:

• Access, correct, or delete your data
• Restrict or object to processing
• Withdraw consent at any time
• Receive your data in a portable format
• File a complaint with your data protection authority

Users outside the EEA/UK/Switzerland may not have the same rights, unless provided by local law.

To exercise your rights, contact us at privacy[at]RalphBlaster.com.

8. Data Retention

We retain personal data for the duration of your account or as needed to fulfill our services. You may request deletion upon contract termination. Residual data may be retained only as required by law.

9. Security

We use appropriate technical and organizational security measures to protect your data. These include access controls, encryption, monitoring, and incident response protocols.

10. Children's Data

RalphBlaster is not directed to individuals under the age of 18. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you via email or platform notice.

12. Contact Us

If you have any questions or requests regarding this Privacy Policy, please contact privacy[at]RalphBlaster.com.