We are Ralu. We respect your privacy and private life, but sometimes we need your personal data in order to provide you with the optimal Ralu experience. In this privacy policy we explain which data we use and how we save, protect and process this data.
As used in this Privacy Policy, "Ralu", "us"and "we" refers to Ralutech Ltd and its affiliates. The "Websites" means Ralu’s websites (including www.ralu.co, any successor URLs, mobile or localized versions and related domains and subdomains), and the "Services" means Ralu’s proprietary software-as-a-service solution(s), including the Dashboard, Ralu application programming interfaces (APIs), Ralu Code and Ralu Apps.
Ralu's privacy policy and data-protection posture is specifically oriented on the EU GDPR and UK GDPR, typically considered the "gold standard" for such legislation worldwide. Ralu also respects other GDPR-similar legislation like the California Consumer Privacy Act of 2018 (CCPA) for citizens of associated jurisdictions. If you want to exercise those rights or find out more, please contact us at privacy@ralu.co.
Personal data
To offer our Apps, Websites and Services we process data, some of which can be regarded as Personal Data. Data is considered “personal data” by the relevant legislation when it contains “information or pieces of information that could allow a person to be directly or indirectly identified”. This is a very wide definition. The European Court e.g. ruled that even dynamic IP-addresses may qualify as personal data.
Information we collect about you
Ralu is a social platform that provides you with personal and relevant suggestions of people that you will likely be interested in. Once your personal profile is created, you can choose to share additional information with us such as your preferences regarding personal hobbies and sport interests. These additional data will be processed by us and added to your profile. This information is used to facilitate our automated decision making processes to find people that are relevant to you. We collect Personal information in a variety of ways:
Information you provide
Ralu is a social platform, which is why we ask you to make a profile by creating a Ralu account. You may choose not to create an account in which case you can still use some of the features that are not related to social interaction.
To create a Ralu account, you will be given the option to sign in with your Facebook, Google or Linkedin account or to create a Ralu account with your e-mail address. When doing so, you authorize us to access and store personal details like your name / alias and email address.
We may also ask you to provide us with some additional information that will be publicly visible on our services, such as profile pictures, your nationality, your gender and date of birth. If you chat with other Ralu users, you provide us the content of your chats, and if you contact us with a customer service or other inquiry, you provide us with the content of that communication. Your group and private chat-conversations are strictly confidential and are only processed by us in order to give you access to your chat-history.
If you choose to make a purchase via our Services we require you to provide your payment information. We will never store any of your payment information without asking your explicit consent. When you make a payment we store (non-personal) information about the transaction like date, price and country code and link this to your account - as well as your email address where you prefer to receive the order confirmation.
Information we collect when you use our Services
When you use our Services, we collect information about which of those services you've used and how you've used them. We might know, for instance, that you visited a particular location and actively engaged in a number of private chat-conversations.
The types of information that we might collect when you use our services are:
Device information
When you use the App, we automatically collect information from your device. This information could include your device brand and type, your browser type and language, the operating system used by your device, access times and IP-address.
Content Information
When you upload content to our Services, like chat messages, photo's or videos, we store them on our servers. If you want to upload existing Photo's or Videos you will be asked to give us access to your photo library. We will only store the content you select to upload and use.
Information about how you use our Services
In order to improve our product and services, we continuously collect data on how you use the Services including, but not limited to, the number of private chat-conversations you are in, the number of locations that you favourite.
How will we use your information
In order to provide you with the best social experience, we may use information that we collect about you to:
How long do we retain your information
We shall store your personal data as long as your account is active. You can always delete your account, after which your personal data will be deleted - as a rule within 30 calendar days. If you want your personal data deleted on a shorter notice, please send us an email via privacy@ralu.co. Please note that we reserve the right to store data regarding your use of our Services when they are irreversibly anonymized.
How we protect your information
We work hard to protect your personal data from unauthorized or unlawful access, alteration, disclosure, use or destruction. That way, unauthorized persons do not have access to your data.
We take the following measures to protect your personal data:
Account security
We serve our website and our APIs exclusively via HTTPS. We use JWT authentication tokens for API logins to help you protect your account data.
Servers - Physical security
Our infrastructure runs inside data centers designed and operated by Amazon Web Services (AWS) in Ireland. AWS data centers feature state of the art environmental security controls to safeguard against fires, power loss, and adverse weather conditions. Physical access to these facilities is highly restricted and they are monitored by professional security personnel. We require all personnel to take their laptop computer with them when they leave the office, to prevent theft from our offices. No data is ever stored on these laptops. Laptops are encrypted to prevent data loss when being stolen.
Software security
Our systems run the latest stable versions of Amazon Linux and our applications run on the latest stable version of docker. Application and database servers are not directly accessible from the internet. We monitor documented threats from public security research databases (such as the Common Vulnerabilities and Exposures catalog). Our developers receive training for secure software development, including Open Web Application Security Project guidelines. All code changes are subject to a multi-point code review with specific attention paid to security.
DDoS mitigation
User data and specifically location can be charged subjects. We maintain firewalls on our edge servers and origin load balancers to protect against bandwidth and protocol-based attacks, and we use intelligent web application firewalls and elastic scaling of our compute capacity to mitigate attacks at the application layer, including complex and evolving attacks.
Data security
All customer data is stored encrypted with at least dual redundancy. We store and secure chat messages in a dedicated database with no personal identifiable data attached.
Logging
We log activity across our platform, from individual API requests to infrastructure configuration changes. Logs are aggregated for monitoring, analysis, and anomaly detection and archived in vaulted storage. We implement measures to detect and prevent log tampering or interruptions.
Employee access
Ralu team access is controlled by a carefully managed security policy. All team members sign non-disclosure agreements to protect your data. All employees receive tools and training for handling sensitive data (including credentials) and for avoiding social engineering and other non-technical attacks. Furthermore we use logging of all database sessions as a protective measure.
Regular audits
We conduct regular internal security audits to review our hardware, software, and physical security configurations. If we discover a vulnerability, we follow a formal incident response framework to ensure rapid mitigation and transparent customer communication.
How we share information
We may share your information about you in a number of ways.
With other Ralu Users
Your profile will be visible to other registered users of our Services. This includes the following information:
When you send chat messages to other users who are in the same group as you, they will be able to see the content of these messages.
Please be aware that other users are always able to take screenshots or make a recording of your Profile, locations and/or chats.
With Third Parties
Ralu can share generic aggregated data with our business partners, trusted affiliates and advertisers. NB: These data will be presented in reports and consist out of aggregated and irreversibly anonymized and do not contain any of your personal data.
Secondly, we may share your data with third parties when we reasonably believe that disclosing the information is needed to:
With Data Processors
We may share your personal data with companies that process data as a service to Ralu. In a data processing agreement, we shall agree with those parties that they shall use your data carefully and they shall only receive the data that is relevant for their services. These parties use your data in accordance with our instructions and not for their own purposes. These parties are "processors" within the meaning of the Relevant Legislation. In the following table we have listed these Processing parties, and explain to you - in their words - what data is processed, why and where. We take care to keep this table up to date, however if you find any inconsistencies please let us know via privacy@ralu.co.
Company: Amazon Web Services Inc
Functionality: Servers
What data: All user data
Why: Storage of data
Country / Transfer mechanism: UK / GDPR
Company: Google LLC
Functionality: Firebase Cloud Messaging
What data: Instance IDs
Why: Firebase Cloud Messaging uses Instance IDs to determine which devices to deliver messages to.
Country / Transfer mechanism: U.S.A. / Standard Contractual Clauses for Data Transfer
Company: Google LLC
Functionality: Firebase Realtime Database
What data: IP addresses, User agents
Why: Realtime Database uses IP addresses and user agents to enable the profiler tool, which helps Firebase customers understand usage trends and platform breakdowns.
Country / Transfer mechanism: U.S.A. / Standard Contractual Clauses for Data Transfer
Company: Google LLC
Functionality: Google Analytics for Firebase
What data: Mobile ad IDs, IDFVs/Android IDs, Instance IDs, Analytics, App Instance Ids
Why: Google Analytics uses the data to provide analytics and attribution information. The precise information collected can vary by the device and environment.
Country / Transfer mechanism: U.S.A. / Standard Contractual Clauses for Data Transfer
Other considerations
Links
You may find third party, advertising or other content on our Services that link to other websites. We do not control the content on these websites and are not responsible for the content or the privacy protection of these websites. We advise you to read the privacy policies of those websites.
Modifications to this privacy policy
We may update our privacy policy from time to time. When we change this privacy policy in a significant way, we will post a notification on our Services along with a link to the updated privacy policy. If you are not registered as user we advise you to visit the Website and this policy regularly.
Are you under the age of sixteen?
Although our Services are general audience Service, we restrict the use of our service to individuals age 16 and above. We do not knowingly collect, maintain, or use personal information from children under the age of 16.
Your rights
We consider the data we collect to be personal. Therefore, you have the following rights:
You can exercise these rights by sending an email to privacy@ralu.co, to which we will respond in less than 30 days. Should you have further questions regarding this privacy policy, please contact us via the information below.
Contact information
Data Protection Officer
Ralutech Ltd
Copyright © 2023 Ralu - All Rights Reserved.