Privacy Policy
What personal data Rufa Labs collects through the website and the Arena, why, and what your rights are.
Last updated: 10 November 2026
This policy explains what personal data Rufa Labs, Luxembourg, collects through the Rufa website and the Rufa Arena, why, and what your rights are under the GDPR. Rufa Labs is the controller of this data. Contact: EMAIL.
What we collect
Why we use it, and on which basis
Who receives it
Your data is processed on servers we control and by service providers acting for us: hosting, our speech and language model infrastructure, and the email service that delivers sign-in codes. They may only use it to provide their service to us. We do not sell your data.
Your IP address is not sent to outside services to look up your location; this is done on our side.
To measure how the service is used (how many people use each model, and for how long), every request to our speech and language model infrastructure carries an anonymous identifier and the name of the feature used (for example chat, text to speech or a live call). The identifier is a one-way code made from your account or your visit: it contains no name, email address or IP address, and it cannot be turned back into them.
How long we keep it
Account data is kept while your account exists. Recordings and Arena results are kept until you withdraw your consent or ask us to delete them. Audio files uploaded to Transcribe on the website, and their transcripts, are kept until you ask us to delete them; as they are not linked to an account, tell us roughly when you uploaded the file and its name. Sign-in codes expire after 10 minutes. Contact and quote messages are kept as long as needed to follow up and for our records.
Your rights
You can ask to access, correct, delete or export your data, to restrict its use, or object to it, and you can withdraw your consent at any time, without affecting what was done before. Write to EMAIL.
You can also complain to the Luxembourg data protection authority, the Commission nationale pour la protection des données (CNPD), cnpd.public.lu.
Changes
When this policy changes in a way that matters, we ask you to accept the new version the next time you sign in.