Privacy policy

Controller: IE KLYHUN VITALI, Batumi, Georgia. Tax ID: 155642319. Contact: hello@rukis.ai.

We operate as a self-employed person in Georgia. You can verify that status.

Rukis is a business service. We process data under the Law of Georgia on Personal Data Protection. Where we offer the service to people in the EEA or the UK, the GDPR (or UK GDPR) also applies.

For this website, contact requests and your Rukis account, we are the controller.

For messages and customer data that your business sends through connected channels (WhatsApp, Instagram, Facebook, Telegram, website widget) and keeps in the product CRM, you are the controller and we are the processor. We process that data only on your instructions to provide the service.

Website and requests: name, the contact you leave (email, Telegram or WhatsApp), language, and technical logs needed to run the site (IP address, browser, device, security events).

Account and billing: account details, plan, invoices and payment status. Card data is handled by our payment provider; we do not store full card numbers.

Service data: conversation content, contact details of your customers, knowledge you upload, and metadata needed to reply, qualify leads and keep contacts in the product, as you configure it.

We use this data to reply to contact requests, provide, bill and support the product, keep the service secure, and meet tax and legal duties.

Legal bases: contract or steps before a contract; legitimate interests in running a secure service (and the equivalent grounds under Georgian law); legal obligation for invoices and tax records; consent where required for non-essential cookies.

Customer conversations are stored in the European Union. We use processors that process data in the EU or under a valid transfer mechanism, including standard contractual clauses where required.

Because we are established in Georgia, some account, support and billing data is also processed in Georgia.

Contact requests are kept until onboarding finishes or you ask us to delete them, then for the period required by Georgian tax and accounting law.

Account and invoice records are kept for the life of the account and then for the statutory retention period in Georgia, typically up to six years.

Conversation data is kept while the account is active and is deleted or exported on request or when the account is closed, subject to backups and any legal hold.

You may access, correct, export or delete personal data, object to processing, restrict it, or withdraw consent. Write to hello@rukis.ai. We will respond within one month.

You may lodge a complaint with the Personal Data Protection Service of Georgia (pdps.ge). If you are in the EEA or the UK, you may also complain to your local supervisory authority.

We do not sell personal data. We share it with processors who host the product, send email, process payments and connect official channel APIs, or when the law requires it.

When you connect a channel, that provider (for example Meta or Telegram) processes data under its own terms.

We do not use your conversations to train third-party foundation models.

The service is for businesses, not for children.

We will update this page when the policy changes. For material changes we will notify account holders by email.