Privacy Policy

Last Updated: 2025/02/27

Introduction

This Privacy Policy describes how Rubberduck AI Oy (“we,” “our,” or “us”) collects, uses, and shares your personal information when you use our services. We are committed to maintaining the highest standards of data privacy and security.

Your privacy is our top priority. We want to be clear about our privacy guarantees:

Your Data Protection Guarantees

✓Your prompts (inputs) and completions (outputs), embeddings, and training data are strictly confidential and are NOT shared with any third parties.
✓Your data is NOT used to train, retrain, or improve any AI models, including the Rubberduck Platform's own models.
✓Your data is NOT used to improve any third-party products or services without your explicit permission or instruction.
✓Any custom or fine-tuned models created for your use are exclusively available to you.
✓The Rubberduck Platform's AI services are operated within our secure environment and do NOT interact with external AI services or APIs without your explicit consent.

Rubberduck AI Oy
c/o A Grid Otakaari 5
02150 Espoo
Finland
Business ID (Y-tunnus): 3505754-1
Email: [email protected]

Information We Collect

We process the following types of data:

Prompts and generated content - submitted by you and generated by our service
Account information (name, email, password)
Profile information
Uploaded data for specific features (e.g., fine-tuning, assistants)
Data for stateful entities (e.g., message history)
Training & validation data you provide

We also automatically collect certain information when you use our services:

Device information
Usage information
Log data
Location information

How We Process Your Information

Our data processing includes:

Processing prompts to generate content through inferencing
Storing data related to messages, threads, and runs
Processing uploaded data for batch operations
Creating fine-tuned (custom) models with your data
Analyzing content for safety and compliance

Important: Our models are stateless - no prompts or generations are stored in the model. Additionally, your data is not used to train or improve our base models.

Data Security

We implement robust technical and organizational measures to protect your data:

Transport encryption using TLS 1.2 or higher
Compute security perimeter
Tokenization of text
Exclusive access to allocated computing resources
Regular security assessments
Access controls and authentication
Real-time monitoring for security incidents
Double encryption at rest with AES-256

Content Safety and Monitoring

To ensure responsible use of our AI services, we implement:

Content filtering for harmful content
Abuse monitoring systems
Safety evaluations of fine-tuned models
Regular audits of system behavior

These safety measures are designed to protect users while maintaining privacy. No data from these processes is used to train or improve our models.

Data Retention

We retain personal information for as long as necessary to:

Provide our services
Comply with legal obligations
Resolve disputes
Enforce our agreements

Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

Access your personal information
Correct inaccurate information
Delete your information
Object to processing
Data portability
Withdraw consent

International Data Transfers

We may transfer your personal information to countries other than your own. We ensure appropriate safeguards are in place for such transfers.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page.

Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: [email protected]
Address: c/o A Grid Otakaari 5, 02150 Espoo, Finland