Privacy Policy

1. Introduction

Ruby Shore Software, LLC ("Ruby Shore," "we," "us," or "our") operates the website rubyshore.com and related digital properties (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and interact with our services.

Please read this policy carefully. This Privacy Policy is provided as a notice of our data practices. By accessing or using our Service, you acknowledge that you have reviewed this Privacy Policy. If you have questions or concerns about our practices, please contact us using the information in Section 14.

We are committed to protecting your privacy and complying with applicable privacy laws, including the California Consumer Privacy Act (CCPA) and, where applicable, the General Data Protection Regulation (GDPR).

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily provide when you:

• Fill out a contact form, project inquiry form, or support request
• Request a proposal, quote, consultation, or additional information
• Subscribe to our newsletter, email communications, or SMS messaging program
• Communicate with us through our website chat, email, telephone, text message, or another communication channel
• Opt in to receive appointment reminders, service updates, project communications, follow-up messages, promotional messages, or other SMS communications from Ruby Shore

The information we collect may include your name, email address, phone number, company name, job title, website address, communication preferences, and the content of messages or information you submit.

When you provide your phone number and expressly opt in to receive SMS messages, we may use that number to send messages related to your inquiry, appointments, requested services, projects, account or service updates, customer support, follow-up communications, and, when separately authorized, marketing or promotional communications.

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical information through cookies, web beacons, and similar tracking technologies, including:

• IP address and approximate geographic location
• Browser type, version, and operating system
• Pages viewed, time spent, and navigation paths
• Referring URLs and search queries
• Device identifiers and screen resolution
• Click behavior, scroll depth, and interaction events

2.3 Information from Third-Party Platforms

We may receive information about you from third-party advertising platforms, social networks, and analytics providers when you interact with our content or advertisements on those platforms.

3. Tracking Technologies We Use

We use several third-party tracking and analytics tools on our website. Below is a detailed description of each.

4. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To respond to inquiries, process project requests, and provide our services to you
• Communication: To contact you about your inquiry, project updates, or relevant services
• Website Improvement: To analyze how visitors use our website and improve content, navigation, and performance
• Marketing: To deliver relevant advertising and marketing communications, including advertising measurement and retargeting campaigns through Google, Meta, and LinkedIn, subject to your consent where required
• Analytics: To understand traffic sources, measure campaign performance, and optimize our advertising spend
• Compliance: To comply with applicable laws, regulations, and legal obligations
• Security: To detect, prevent, and address technical issues, fraud, and security incidents

We do not sell or share your personal information for cross-context behavioral advertising purposes, and we do not rent your personal information. Phone numbers, SMS opt-in information, consent records, and messaging data are never sold or shared with third parties or affiliates for their own marketing or promotional purposes.

The legal grounds on which we rely to carry out each of these purposes are described in Section 5.

5. Legal Bases for Processing

Where the General Data Protection Regulation, UK GDPR, or another law requiring a legal basis applies, Ruby Shore relies on one or more of the following legal grounds to process personal data:

Consent

We rely on consent when you voluntarily agree to a particular type of processing, including:

• Receiving marketing emails or promotional SMS messages
• Receiving nonessential cookies, analytics, advertising, or remarketing technologies where consent is required
• Participating in certain optional communications or promotional activities

You may withdraw your consent at any time through the applicable unsubscribe or opt-out method, our cookie preference controls, or by contacting us. Withdrawal of consent does not affect processing that occurred before consent was withdrawn.

Performance of a Contract or Steps Before Entering a Contract

We may process personal data when necessary to:

• Respond to a request for a proposal, quote, consultation, or service information
• Evaluate and prepare for a potential client engagement
• Enter into, administer, and perform a client service agreement
• Provide contracted website, software, marketing, hosting, maintenance, or support services
• Process project communications, service requests, billing matters, or account administration

Legitimate Interests

We may process personal data when necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.

These legitimate interests may include:

• Responding to business inquiries and communicating with prospective or existing clients
• Operating, maintaining, securing, and improving our website and services
• Understanding website performance and general visitor behavior
• Improving website usability, navigation, content, and conversion paths
• Maintaining business records and managing client relationships
• Preventing fraud, misuse, security threats, and technical problems
• Measuring the effectiveness of our business and marketing activities
• Establishing, exercising, or defending legal claims

Where required by law, we obtain consent before using nonessential analytics, advertising, behavioral tracking, or remarketing technologies.

Legal Obligations

We may process and retain personal data when necessary to comply with applicable legal or regulatory obligations, including:

• Tax, accounting, and financial recordkeeping requirements
• Responding to lawful requests, subpoenas, court orders, or government inquiries
• Maintaining records of consent, opt-outs, and privacy requests
• Complying with data protection, telecommunications, and consumer protection requirements

Establishment, Exercise, or Defense of Legal Claims

We may process personal data when reasonably necessary to establish, exercise, investigate, or defend legal rights or claims, resolve disputes, or enforce our agreements and policies.

Processing Activity Summary

Depending on the circumstances, we generally rely on the following legal bases:

• Contact forms, quote requests, and project inquiries: steps taken at your request before entering a contract, performance of a contract, or legitimate interests
• Client projects, accounts, support, and service communications: performance of a contract, legitimate interests, or legal obligations
• Website chat: steps taken at your request before entering a contract, performance of a contract, or legitimate interests
• Transactional and service-related SMS messages: consent, performance of a contract, or legitimate interests, as permitted by applicable law
• Promotional email and SMS communications: consent where required
• Essential website cookies and security technologies: legitimate interests or performance of a requested service
• Google Analytics and Crazy Egg: consent where required, or legitimate interests where permitted by law
• Google Ads, Meta Pixel, LinkedIn Insight Tag, and remarketing: consent where required
• Fraud prevention and website security: legitimate interests or legal obligations
• Record retention and compliance documentation: legal obligations or legitimate interests

6. SMS Messaging and Phone Number Privacy

SMS Program and Data Collection

Ruby Shore may collect your phone number when you provide it through our website, a contact or project form, an agreement, an in-person interaction, or another approved opt-in method.

When you expressly consent to SMS messaging, Ruby Shore may send you messages concerning:

• Responses to inquiries and requested information
• Appointment confirmations and reminders
• Project, service, account, or support updates
• Follow-up communications
• Customer service messages
• Marketing or promotional communications when you have separately agreed to receive them

Message frequency varies. Message and data rates may apply.

No Sale or Marketing Sharing of Phone Data

Ruby Shore does not sell, rent, or provide customer phone numbers, SMS opt-in information, SMS consent records, or messaging data to third parties for their own advertising or marketing purposes.

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Information may be disclosed to telecommunications providers, messaging platforms, and other service providers solely as necessary to deliver and support Ruby Shore's SMS messaging program. Those providers are not authorized to use the information for their own marketing purposes.

SMS opt-in data and consent will not be transferred to another business for that business to send its own messages.

SMS Consent

Consent to receive SMS messages applies only to communications from Ruby Shore Software, LLC. Consent to receive marketing text messages is not a condition of purchasing products or services from Ruby Shore.

You may withdraw your SMS consent at any time by replying STOP to a message. You may reply HELP for assistance. Additional SMS program terms are provided in our Terms of Service.

Protection and Retention of Phone Data

Phone numbers, SMS consent records, and messaging information are stored using systems and service providers with administrative, technical, and organizational safeguards designed to protect information from unauthorized access, use, alteration, or disclosure.

Access to this information is limited to authorized personnel and service providers who need it to operate or support the messaging program. No electronic storage or transmission system can be guaranteed to be completely secure.

We retain phone numbers, opt-in records, opt-out records, and messaging information for as long as reasonably necessary to operate the messaging program, document consent and compliance, respond to requests, resolve disputes, and satisfy applicable legal obligations.

Access and Deletion Requests

You may request access to or deletion of personal information associated with your phone number by emailing privacy@rubyshore.com or contacting us through rubyshore.com/contact. SMS-related requests are handled as part of our broader privacy rights process described in Section 10. Section 14 is the single contact point for all privacy requests.

We may need to verify your identity before completing a request. Certain information, including opt-out records or records required to demonstrate legal compliance, may be retained when permitted or required by law.

7. Cookies & Similar Technologies

Our website uses cookies — small text files stored on your device — and similar tracking technologies (web beacons, pixels, local storage) to enhance your browsing experience and support our analytics and advertising activities.

Types of Cookies We Use

You can manage or disable cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our website. For more information about managing cookies, visit allaboutcookies.org.

8. How We Share Your Information

We do not sell your personal information, and we do not share your personal information for cross-context behavioral advertising purposes. We may disclose limited information to service providers and other parties in the circumstances described below. Phone numbers, SMS opt-in information, SMS consent records, and messaging data are not sold, rented, or shared with third parties or affiliates for their own marketing or promotional purposes.

• Service Providers: We may disclose information to vendors that help us operate our website, provide hosting, deliver email or SMS messages, support website chat, maintain customer records, analyze website usage, or provide other services on our behalf. These providers may use information only to perform services for Ruby Shore and are subject to applicable contractual or confidentiality obligations.
• Advertising Platforms: Subject to your consent where required, website interaction and advertising data may be processed through Google, Meta, and LinkedIn to measure advertising, attribute conversions, and create relevant advertising audiences.
• Analytics Providers: Subject to your consent where required, website usage and behavioral data may be processed through services such as Google Analytics and Crazy Egg to evaluate and improve website performance and usability.
• SMS Service Providers: Phone numbers and messaging information may be processed by telecommunications carriers and messaging service providers only as necessary to transmit, manage, secure, and support Ruby Shore messages. They are not authorized to use that information for their own marketing.
• Legal Requirements: We may disclose information when required by law, regulation, court order, subpoena, or other valid legal process.
• Business Transfers: Information may be transferred as part of a merger, acquisition, financing, reorganization, or sale of business assets, subject to applicable legal requirements. SMS opt-in consent will not be treated as blanket authorization for an acquiring business to send unrelated marketing messages.
• Protection of Rights: We may disclose information when reasonably necessary to protect Ruby Shore, our clients, website visitors, or others against fraud, security threats, unlawful activity, or harm.

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Contact and inquiry data is retained for up to 3 years from last contact
• Google Analytics data is retained in accordance with our configured retention settings (default: 14 months)
• Advertising and remarketing audience data is retained in accordance with the policies of Google and Meta
• Form submission records may be retained for business and legal compliance purposes
• Website chat conversations may be retained for up to three years from the last interaction, or longer when reasonably necessary for an active client relationship, support matter, dispute, or legal obligation
• Crazy Egg and other website behavior data is retained according to our account configuration and the applicable provider's retention settings
• Phone numbers, SMS consent records, opt-out records, and messaging records are retained for as long as reasonably necessary to provide communications, document consent and compliance, respond to requests, and satisfy applicable legal obligations
• Opt-out records may be retained after a deletion request to ensure that the individual remains unsubscribed

When your information is no longer needed, we will securely delete or anonymize it.

10. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

All Visitors

• Opt out of Google personalized advertising at adssettings.google.com
• Opt out of Meta advertising at Facebook Ad Preferences
• Opt out of interest-based advertising via the DAA opt-out tool
• Manage cookies through your browser settings at any time

California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, disclose, and sell or share
• Request access to the specific personal information we have collected about you
• Request correction of inaccurate personal information we maintain about you
• Request deletion of your personal information, subject to certain exceptions
• Opt out of the sale or sharing of your personal information for cross-context behavioral advertising (note: we do not sell personal information, and we do not share personal information for cross-context behavioral advertising as described in this policy)
• Limit the use and disclosure of sensitive personal information to purposes permitted by law
• Non-discrimination for exercising your CCPA/CPRA rights

To submit a California privacy request, please contact us using the information in Section 14.

EEA and UK Residents

If you are located in the European Economic Area or the United Kingdom, applicable data protection law may provide you with the right to:

• Request access to your personal data
• Request correction of inaccurate or incomplete personal data
• Request deletion of your personal data
• Request restriction of processing
• Object to certain processing, including processing based on legitimate interests and direct marketing
• Request portability of personal data you provided to us
• Withdraw consent at any time when processing is based on consent
• Lodge a complaint with the applicable data protection supervisory authority

Withdrawing consent does not affect the lawfulness of processing performed before consent was withdrawn.

Our legal grounds for processing personal data are described in the section titled "Legal Bases for Processing."

To exercise any of these rights, please contact us using the information in Section 14.

Right to Lodge a Complaint (EEA and UK Residents)

We encourage you to contact us first if you have questions or concerns about how we handle your personal data so that we have an opportunity to address the matter.

If you are located in the European Economic Area, you have the right to lodge a complaint with the data protection supervisory authority in the country where you habitually reside, where you work, or where you believe an alleged violation occurred.

A list of European data protection supervisory authorities is available through the European Data Protection Board.

If you are located in the United Kingdom, you may lodge a complaint with the Information Commissioner's Office.

Exercising your right to complain does not affect any other administrative or judicial remedies available to you.

11. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data in transit
• Access controls limiting who can access personal information
• Regular security assessments of our systems and practices
• Vendor due diligence for third-party processors

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

12. Third-Party Links

Our website may contain links to third-party websites, services, or resources. This Privacy Policy does not apply to those third-party sites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.

13. Children's Privacy

Our Service is a business-to-business website offering software development, web design, marketing, and related professional services. It is not directed to children, and we do not knowingly collect personal information from minors.

If we learn that we have inadvertently collected personal information from a minor, we will take prompt steps to delete that information. If you believe we may have collected information from a minor, please contact us at privacy@rubyshore.com.

For visitors located in the European Economic Area: under GDPR Article 8, online services that rely on consent to process personal data are subject to a minimum digital consent age, which varies by EEA member state (typically 13 to 16 years). Because our Service is directed exclusively to businesses and professionals and does not rely on consent from individual consumers as its primary legal basis, we do not offer or target the Service toward minors in the EEA. If you are a minor, please do not submit personal information through our website.

14. Privacy Contact

For questions about this Privacy Policy, requests to exercise privacy rights, concerns about our data practices, or requests involving personal information, please contact:

Our Privacy Contact coordinates privacy inquiries and requests on behalf of Ruby Shore. This contact designation does not mean that Ruby Shore has formally appointed a Data Protection Officer under the GDPR unless expressly stated otherwise.

We may need to verify your identity before fulfilling certain requests. We generally respond to verified privacy requests within the time required by applicable law.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the revised policy on this page with an updated "Last Updated" date and, where changes are material, we will take reasonable steps to notify you in advance.

We encourage you to review this policy periodically to stay informed about how we collect, use, and protect your information. If you have questions about any update, please contact us at privacy@rubyshore.com.