Legal

Privacy Policy

Information we collect

When you submit an assessment request, RulesHold may collect your name, business email, company, company website, requested assessment category, and the high-level project information you choose to provide.

Do not submit sensitive access data

The public request form is not a secure channel for passwords, API keys, session tokens, customer data, confidential source code, internal documents, exploit payloads, or other sensitive access material.

How we use request information

Information submitted through the RulesHold website is used to review assessment requests, communicate with you, determine whether RulesHold is a suitable fit, and define next steps for a potential assessment.

Sharing

RulesHold does not sell personal information. Information may be disclosed when reasonably necessary to operate RulesHold, protect our rights or security, respond to lawful requests, or comply with applicable legal obligations.

Retention

Inquiry information may be retained for as long as reasonably necessary to respond to the request, maintain appropriate business records, and meet applicable operational or legal obligations.

Security

RulesHold uses reasonable measures intended to protect information handled through the website. No internet transmission or storage system can be guaranteed to be completely secure.

Changes to this policy

This policy may be updated as the website, service model, or data-handling practices change.