Privacy Policy

Last updated: 18 June 2026

RubanTag ("we", "our", "the service") is operated by Ruban Softwares, Trichy, Tamil Nadu, India. This policy explains what data we collect, how we use it, and your rights.

1. Data we collect

• Account data - Name, email address, and hashed password when you register.
• PDF files - Files you upload for tagging. These are stored temporarily and deleted after your plan's retention period (Guest: 24h, Free: 7 days, Pro: 90 days, Enterprise: custom).
• Usage data - Number of PDFs processed, file sizes, processing timestamps, and accessibility scores. We do NOT read the content of your PDFs beyond what is required to perform tagging.
• Payment data - Handled entirely by Razorpay. We store only the Razorpay payment ID and subscription ID - never card numbers or bank details.
• API keys - Stored as SHA-256 hashes. The raw key is shown only once and never stored in plain text.
• Log data - Standard server access logs (IP address, browser, pages visited) retained for up to 30 days for security purposes.

2. How we use your data

• To provide the PDF tagging service.
• To send transactional emails (account creation, payment receipts). We do not send marketing emails without your consent.
• To enforce plan limits and prevent abuse.
• To improve the tagging engine using aggregate, anonymised accuracy statistics.

3. Data sharing

We do not sell or share your personal data with third parties except:

• Razorpay - For payment processing. Subject to Razorpay's privacy policy.
• Legal obligations - If required by Indian law, court order, or government authority.

4. Data retention and deletion

PDF files are automatically deleted after your plan's retention period via a nightly purge job. Account data is retained while your account is active. To request deletion of your account and all associated data, email info@rubansoftwares.com from your registered address. We will process the request within 7 business days.

5. Cookies and sessions

We use a single session cookie (named RTAG) to maintain your login state. No tracking cookies, no third-party analytics cookies. The session cookie is HttpOnly and SameSite=Lax.

6. Security

Passwords are hashed with bcrypt. API keys are stored as SHA-256 hashes. All connections are over HTTPS. PDF files are stored with UUID filenames not guessable from the original filename.

7. Children's privacy

RubanTag is not directed at children under 13. We do not knowingly collect data from children.

8. Changes to this policy

We may update this policy. Material changes will be noted at the top of this page with a new "last updated" date.

9. Contact

Questions about this policy: info@rubansoftwares.com
Ruban Softwares, Trichy, Tamil Nadu 620001, India.