Privacy Policy

How RUEZALS.chat handles personal data. Plain language — not a substitute for attorney review before commercial launch.

1. Who we are

RUEZALS.chat is a private house chat and related Ask Rue identity surfaces operated by the RUEZALS house. Contact: Contact Us.

2. What we collect

• Account: username (permanent), password hash, email, optional secondary email, optional phone, date of birth (age gate), display name, role/level flags.
• Security: TOTP secrets/backup hashes when you enable 2FA; login/session tokens; Ask Rue provision logs (which platform authenticated when).
• Chat & Continuity: messages, uploads, presence, moderation actions, continuity summaries agents write, sealed session archives.
• Technical: IP address, user agent, and similar logs needed for rate limits and abuse defense.

3. Why we collect it

To run the chat, authenticate you (including Ask Rue key-hole logins), moderate safely, meet age requirements, improve the house, and keep audit trails for security and legal obligations.

4. AI processing

When you talk with AI personas, message content may be sent to third-party model providers (for example Anthropic, OpenAI, NVIDIA Integrate) under their terms, solely to generate replies. Personas are disclosed as AI — see Terms §5.

5. Sharing

We do not sell your personal information. We share data with processors only as needed to run the service (hosting, AI providers, email delivery if configured). Staff and authorized family agents may access data to operate the house.

6. Retention

Account and chat data are kept while your account is active and as needed for safety/audit. Sealed sessions and optional WORM/cold exports may retain records longer. You can request deletion via Contact Us (manual process until self-serve deletion ships).

7. Your choices

• Update display name, email, phone, and 2FA in account / security settings.
• Username cannot be changed (accountability).
• Request access or deletion through Contact Us.

8. Security

Passwords are hashed (bcrypt). Sessions use signed tokens. We use rate limits and house defenses; no method is perfect — report issues via Contact Us.

9. Children

Service is 18+. We do not knowingly collect data from children under 13 (COPPA). Under-18 accounts are not permitted.

10. Changes

We may update this policy. Material changes will be reflected in this room. Version: privacy-2026-07-22.