RubiComps

RubiComps Privacy Notice

Last updated: Sep 2026

This Privacy Notice explains how VFD SaaS Technologies Ltd (“VFD SaaS Technologies”, “we”, “us” or “our”) collects, uses and protects personal data when you use RubiComps.

RubiComps is a trading name and platform operated by VFD SaaS Technologies Ltd, a company incorporated in England and Wales under company number 09312818.

For the purposes of applicable data protection laws, including the UK GDPR and the Data Protection Act 2018, VFD SaaS Technologies is generally the data controller of the personal data described in this Privacy Notice.

Where we process personal data on behalf of a RubiComps customer as a data processor, that processing is governed by our Data Processing Addendum (“DPA”).

1. What Personal Data We Collect

1.1 Account information

When you create a RubiComps Account, we collect:

  • your name;
  • your company (optional); and
  • your email address.

We use this information to create and administer your Account and to provide access to RubiComps.

1.2 Payment information

If you purchase an Alpha Subscription or Credits, payments are processed using Stripe, our payment provider.

Payment card details and other payment credentials are processed by Stripe. We do not need to receive or store your full payment card details in order to provide RubiComps.

We may receive limited transaction and payment information from Stripe that is necessary to administer your Account, record payments, manage your Subscription and Credits, and deal with payment-related issues.

Stripe may process personal data in accordance with its own privacy terms and policies.

1.3 Information you provide through RubiComps

If you upload or enter information into RubiComps, we may process that information in order to provide the Services you have requested.

You retain ownership of information you upload or enter into RubiComps, subject to the rights granted to us under the Terms.

Where such information contains Personal Data that we process solely on your behalf, we act as a data processor and that processing is governed by the DPA.

1.4 Communications

If you contact us, we may process the information contained in your communication, including your name, email address and the contents of your enquiry, in order to respond to you and provide customer support.

2. How We Use Personal Data

We may use Personal Data for the following purposes:

Account administration

  • creating and administering your RubiComps Account;
  • authenticating your access;
  • maintaining your Account information;
  • providing the RubiComps Service; and
  • communicating with you about your Account.

Subscriptions, Credits and payments

  • administering Alpha Subscriptions;
  • recording and managing Credit purchases;
  • processing and reconciling payments;
  • dealing with failed or disputed payments; and
  • managing cancellations and refunds where applicable.

Security and fraud prevention

  • protecting the security of the Platform;
  • preventing unauthorised access;
  • detecting and preventing fraud, misuse and abuse; and
  • enforcing our Terms.

Customer support

  • responding to enquiries;
  • investigating technical issues; and
  • providing assistance relating to your Account or use of RubiComps.

Legal and regulatory obligations

  • complying with applicable laws and regulations;
  • responding to lawful requests from authorities; and
  • establishing, exercising or defending legal claims.

3. Legal Bases for Processing

Where applicable, we rely on one or more of the following legal bases under the UK GDPR:

Contract

We may process your Personal Data where necessary to perform our contract with you, including providing RubiComps, administering your Account, managing your Subscription and providing Credits and other purchased services.

Legal obligation

We may process Personal Data where necessary to comply with a legal or regulatory obligation.

Legitimate interests

We may process Personal Data where necessary for our legitimate interests, provided those interests are not overridden by your rights and interests.

These interests may include administering and improving our business, maintaining Platform security, preventing fraud and misuse, enforcing our Terms and establishing or defending legal claims.

Consent

Where applicable law requires consent for a particular processing activity, we will seek your consent.

4. Your Account

Creating a RubiComps Account requires you to provide your name and email address.

You are responsible for ensuring that the information associated with your Account remains accurate and up to date.

Your Account information may be retained while your Account remains active and for a reasonable period afterwards where necessary for legal, accounting, security, fraud-prevention or dispute-resolution purposes.

5. Personal Data Processed on Behalf of Customers

RubiComps may allow a customer to upload or enter information into the Platform.

Where a customer provides Personal Data to us for processing on its behalf, the customer is generally the data controller and VFD SaaS Technologies is the data processor.

Our processing of that Personal Data is governed by the DPA rather than this Privacy Notice, except where we process the information for our own independent purposes as a data controller.

Customers are responsible for ensuring that they have the necessary rights, permissions and notices required to provide Personal Data to RubiComps.

6. Artificial Intelligence

Certain RubiComps functionality uses artificial intelligence, automated processes and computational methods, as described in the Terms.

AI may be used to generate financial analysis, commentary, forecasts, valuation outputs, rankings and other information.

We do not provide your Personal Data to third-party AI or large language model providers for them to process on our behalf.

We may use AI tools internally in connection with the development of our software and products. Such internal software-development use is separate from the provision of Customer Personal Data to AI providers for Processing on a customer’s behalf.

AI-generated outputs may contain errors or inaccuracies. The Terms explain the limitations that apply to AI-generated analysis and other Platform outputs.

7. Company Data

RubiComps provides Company Data relating to companies, including financial information, company information, financial ratios, benchmarks and other information obtained from public and third-party sources.

Company Data may contain information relating to identifiable individuals, particularly in connection with company directors or other individuals associated with companies.

Where we determine the purposes and means of processing such information for our own purposes, we process it as a data controller and this Privacy Notice applies.

Where Personal Data is provided to us by a customer for processing on that customer’s behalf, the DPA applies.

8. Sharing Personal Data

We may disclose Personal Data where reasonably necessary for the purposes described in this Privacy Notice, including to:

  • service providers that assist us in operating RubiComps;
  • payment providers, including Stripe;
  • professional advisers;
  • legal, regulatory or governmental authorities where required or permitted by law; and
  • other parties where necessary to protect our rights, users or business, or in connection with a corporate transaction.

We do not sell your Personal Data.

Where a third party processes Personal Data on our behalf as a processor, we require appropriate contractual protections.

Where a third party acts as an independent controller, its own privacy notice and terms may apply.

9. Stripe

We use Stripe to process payments for Subscriptions and Credits.

Stripe may process payment and transaction information necessary to provide payment services.

We do not control the personal data that Stripe processes independently as part of its payment services. Stripe may process that information under its own privacy terms and applicable data protection arrangements.

10. International Transfers

Some service providers may process Personal Data outside the United Kingdom.

Where Personal Data is transferred outside the UK, we will ensure that the transfer is made in accordance with applicable Data Protection Laws and using an appropriate lawful transfer mechanism where required.

11. How Long We Keep Personal Data

We retain Personal Data only for as long as reasonably necessary for the purposes described in this Privacy Notice.

In determining retention periods, we consider:

  • the purpose for which the Personal Data was collected;
  • whether the Account remains active;
  • whether we need the information to provide the Services;
  • our legal and regulatory obligations;
  • accounting and tax requirements;
  • security and fraud-prevention requirements; and
  • the need to establish, exercise or defend legal claims.

When an Account is deleted, we may permanently delete Account information and associated information, subject to information that we are required or reasonably entitled to retain under the Terms or applicable law.

Unused Credits are permanently lost when an Account is deleted, as provided in the Terms.

12. Security

We take reasonable technical and organisational measures designed to protect Personal Data against unauthorised access, loss, misuse, alteration or disclosure.

However, no internet-based service can be guaranteed to be completely secure.

You are responsible for keeping your Account credentials confidential and must notify us promptly if you believe your Account has been accessed without permission.

13. Your Data Protection Rights

Depending on the circumstances and applicable law, you may have rights including:

  • the right to access your Personal Data;
  • the right to have inaccurate Personal Data corrected;
  • the right to request deletion of Personal Data;
  • the right to restrict Processing;
  • the right to object to certain Processing;
  • the right to data portability; and
  • the right to withdraw consent where Processing is based on consent.

These rights are subject to applicable legal conditions and exceptions.

You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), if you believe that your Personal Data has been processed unlawfully.

Further information about the ICO and how to make a complaint is available from the ICO’s website.

14. Automated Decision-Making

RubiComps uses automated processes and AI to generate analysis, forecasts, valuations, rankings and other outputs.

These outputs are provided as analytical and decision-support tools.

We do not use your Account Personal Data to make decisions about you that produce legal effects or similarly significant effects solely through automated decision-making.

15. Children’s Data

RubiComps is intended for business and professional use and is not directed at children.

We do not knowingly collect Personal Data from children for the purpose of providing RubiComps services.

16. Cookies and Similar Technologies

RubiComps may use cookies and similar technologies where necessary to operate and secure the Platform and, where applicable, for other purposes described in our Cookie Policy.

The Cookie Policy provides further information about the cookies and similar technologies used by RubiComps.

17. Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect changes to our services, processing activities, legal requirements or other relevant circumstances.

The latest version will be made available on the RubiComps website and will state the date on which it was last updated.

18. Contact Us

RubiComps is a trading name of VFD SaaS Technologies Ltd.

VFD SaaS Technologies Ltd
Company number: 09312818
Email: info@rubicomps.ai

If you have questions about this Privacy Notice, your Personal Data or the way we process Personal Data, please contact us at info@rubicomps.ai.