Privacy

Last updated November 8, 2026

This page explains what Rulebook stores, why, and who it is shared with. Questions go to support.rulebook@gmail.com.

What we store

• Your GitHub profile: username, name and profile picture, used to sign you in.
• A GitHub access token, stored encrypted. It is used to read the rule sheet file you connect and to open pull requests you send to engineers. It is only given repo access if you choose to connect a repo.
• AI API keys your team adds, stored encrypted and used only to run your tests.
• Your projects: rule sheets, drafts, situations, the AI answers to them, and the judge's scores.
• Your team: its name, members and plan.

Real chats you upload

You can upload past conversations between your customers and your support bot so Rulebook can find where the bot went wrong. These conversations contain your customers' data, so they are handled like this:

• Before anything is sent to an AI provider, email addresses, phone numbers, links, bank account numbers and other long numbers are blanked out. The AI is also told to replace people's names.
• The upload itself is never stored. It is held in memory only while it is read. We keep only the problems found in it: a short title, the customer's message with personal details blanked, and what the bot did wrong.
• You decide which problems become situations. Deleting the project deletes all of it.
• Blanking is automatic and can miss things, such as an address written out in words. Only upload chats you are allowed to share, and remove anything sensitive first. For your customers, you remain responsible for that data; Rulebook processes it on your behalf.

Payments

Payments are handled by Stripe. We never see or store your card number. We keep your Stripe customer and subscription IDs so we know which plan your team is on.

Who we share it with

• AI providers. When you run a test or upload chats, your rule sheet, situations and the blanked chats are sent to the AI providers you turned on (Anthropic for Claude, OpenAI for ChatGPT, Google for Gemini) to get answers and scores. Their own terms and privacy policies apply to that data.
• GitHub, to sign you in and to read and update the file you connect.
• Stripe, to take payments.
• Our hosting and database providers, which store the data above for us.

We don't sell your data and we don't use it to train AI models.

Cookies

We use two cookies: one that keeps you signed in, and one that remembers which team you are working in. No tracking or advertising cookies.

Deleting your data

Team owners can delete projects at any time, which removes their situations and test results. To delete your account or your whole team, email support.rulebook@gmail.com. You can also revoke Rulebook's GitHub access at any time from your GitHub settings.

Changes

If we change this policy, we'll update the date at the top of this page.