Skip to content
RUKH
Legal

Rukh Labs Privacy Policy

This policy explains how the Rukh Labs website and business handle information from inquiries, optional Bluesky OAuth, email, analytics, technical logs, and current beta-interest forms.

Last updated: August 16, 2026

Looking for the Android app policy? Read the Farzin Privacy Policy.

Information you choose to provide

The project inquiry form submits the information you enter directly to Rukh Labs and stores the lead in a database used to manage inquiries. Depending on the form selections, this can include your name, email address, phone number, organization or role, project type, budget, timeline, website, referral source, message, source page, and limited referral or campaign metadata. If you email Rukh Labs directly, the message may include any information you choose to provide.

IAZMA and optional sign-in

IAZMA public network scans do not require a Rukh Labs account or Bluesky login. Scan progress and results are stored locally on your device. If you optionally connect a Bluesky or AT Protocol account to follow discoveries inside IAZMA, authorization is handled through AT Protocol OAuth with your account provider. Rukh Labs does not ask for or receive your Bluesky password. OAuth credentials are managed in browser storage by the OAuth client rather than stored in a Rukh Labs server database. IAZMA stores the connected account DID locally so it can restore that browser session, and deliberate follow actions are sent to the account's AT Protocol service.

Beta-interest form

The current Glass Squares OS beta-interest form validates the entered address in your browser and shows a local confirmation. It does not transmit the email address to Rukh Labs. A non-identifying analytics event may record that the form was completed, without the address or selected personal information. This policy will be updated before any server-side waitlist collection is introduced.

Analytics and technical information

Rukh Labs uses Vercel Analytics to understand general site usage and conversion actions. Events are configured not to include names, email addresses, phone numbers, form messages, résumé data, or Bluesky OAuth credentials. Vercel and the site hosting infrastructure may also process technical information and logs needed to deliver, secure, and operate the website, such as request, device, browser, and network information.

How information is used

Information is used to respond to inquiries, evaluate and deliver requested services, provide product support, maintain and secure the website, operate user-requested Bluesky follow actions, understand aggregate site usage, and comply with applicable obligations. Rukh Labs does not use inquiry details or Bluesky connection information to build advertising profiles.

Sharing and service providers

Information may be processed by providers used to operate the website and communications, including Vercel, the database provider used for contact leads, email providers, and—when you choose optional Bluesky sign-in—the AT Protocol services involved in account authorization and requested follow actions. Public Bluesky graph requests are made against public Bluesky API infrastructure. Information may also be disclosed when reasonably necessary to comply with law, protect rights or security, or complete a business transaction. Rukh Labs does not sell personal information.

Retention

Contact leads, communications, and related project records are kept only as long as reasonably useful for the inquiry, working relationship, recordkeeping, security, or legal needs. IAZMA scan results remain in local browser storage unless you clear them. Optional OAuth credentials and the connected account identifier remain in browser storage according to the OAuth session lifecycle or until you sign out or clear browser storage. Hosting, database, analytics, email, and account providers may retain technical data under their own policies. No fixed deletion period is promised where one has not been implemented.

Security limitations

Rukh Labs uses reasonable technical and organizational care, but no website, database, browser storage, email system, OAuth session, or internet transmission can be guaranteed completely secure. Avoid sending credentials, payment-card details, confidential employer data, or other sensitive information through a first-contact message. Rukh Labs does not request Bluesky passwords through IAZMA.

Children

This business website and its services are not directed to children under 13, and Rukh Labs does not knowingly seek personal information from children through the site.

Policy updates

This policy may change when the website, service providers, or business practices change. The current version will be posted here with an updated date.

Contact

For privacy questions, contact Rukh Labs at hello@rukhlabs.com.