PRIVACY POLICY

1. DEFINITIONS

For the purposes of this Policy, the following terms have the meanings set out below:

• I. Account: A unique user account registered to access the Services.
• II. Affiliate: Any entity that controls, is controlled by, or is under common control with RHUCE.
• III. Data Subject: Any natural person whose personal data is collected or processed.
• IV. Personal Data: Any information relating to an identified or identifiable individual.
• V. Processing: Any operation performed on personal data, including collection, storage, use, transfer, or deletion.
• VI. Service Provider: A third-party vendor or contractor engaged by RHUCE to process data on our behalf.
• VII. Usage Data: Information collected automatically through interaction with the Services, including device identifiers, IP addresses, and browsing patterns.
• VIII. User Content: Any content uploaded, submitted, or shared by users on RHUCE, including profiles, posts, portfolios, media files, and metadata.

2. DATA WE COLLECT

2.1 Personal Data

RHUCE collects Personal Data that is necessary to operate our Services. Examples include:

• I. Account Information: Name, email, phone number, username, profile photo, biography, skills, professional credentials.
• II. Authentication Data: Passwords, multi-factor authentication data, login history.
• III. Payment Information: Payment card details, billing address, subscription data (processed securely via third-party gateways).
• IV. User Content: Uploaded portfolios, posts, comments, media files, and associated metadata.
• V. Communications: Messages, support requests, and feedback submitted through RHUCE.

2.2 Usage Data

Collected automatically when you interact with RHUCE:

• I. Device type, operating system, browser type and version
• II. IP address and geolocation data
• III. Page visits, clickstream, time spent, and navigation patterns
• IV. Cookies, web beacons, analytics tags, and other tracking technologies

2.3 Third-Party Data

Where you link third-party accounts (e.g., GitHub, LinkedIn, Google), RHUCE may collect:

• I. Profile information, professional credentials, or content shared via the integration
• II. Consent-based activity data, as permitted by the third-party's privacy settings

3. HOW WE USE YOUR PERSONAL DATA

RHUCE uses Personal Data for purposes that are lawful, necessary, and proportionate:

• I. To provide, operate, and maintain the Services.
• II. To create and manage your Account, including authentication and subscription management.
• III. To provide customer support, including responding to inquiries, complaints, and technical issues.
• IV. To communicate important notices, updates, or changes to RHUCE policies.
• V. To personalize and improve the Services, including recommendations, analytics, and research.
• VI. To process payments, prevent fraud, and enforce financial and contractual obligations.
• VII. To comply with legal obligations, regulatory requirements, or governmental requests.
• VIII. To detect, prevent, and respond to security incidents, abuse, or breaches.
• IX. To exercise or defend RHUCE's legal rights, including enforcing intellectual property rights.

4. LEGAL BASIS FOR PROCESSING (WHERE REQUIRED)

Where required by law, RHUCE relies on the following legal bases to process Personal Data:

• I. Consent – When you provide explicit consent for specific processing activities.
• II. Contractual Necessity – To fulfill your obligations under the Terms of Use or other agreements.
• III. Legal Obligation – To comply with applicable laws and regulations.
• IV. Legitimate Interests – To ensure security, improve services, or manage operations, balanced against user rights.

5. SHARING AND DISCLOSURE OF DATA

RHUCE does not sell your Personal Data. Data may be shared with:

• I. Affiliates – For operational purposes under confidentiality obligations.
• II. Service Providers – Third parties performing services on our behalf, including cloud storage, analytics, and payment processing.
• III. Legal and Regulatory Authorities – Where required by law, court order, or regulatory request.
• IV. Mergers, Acquisitions, or Restructuring – Personal Data may be transferred as part of corporate transactions.
• V. Publicly Shared Content – Content you post publicly may be visible to other users.

All transfers are subject to adequate safeguards, including contractual obligations, encryption, and compliance with cross-border data transfer laws (e.g., Standard Contractual Clauses for GDPR).

6. USER RIGHTS

RHUCE ensures all users can exercise their data protection rights as applicable under local and international law:

• I. Access: Request a copy of your Personal Data.
• II. Rectification: Correct inaccurate or incomplete data.
• III. Erasure: Request deletion of Personal Data, subject to legal or contractual obligations.
• IV. Restriction: Limit processing under certain conditions.
• V. Portability: Receive your data in a structured, machine-readable format.
• VI. Objection: Object to processing for marketing or legitimate interests.
• VII. Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.

7. SECURITY MEASURES

RHUCE implements organizational, technical, and administrative measures to protect data:

• I. End-to-end encryption for data in transit and AES-256 encryption for data at rest
• II. Zero Trust access architecture and multi-factor authentication
• III. Regular security audits, vulnerability assessments, and penetration testing
• IV. Employee training on data privacy and breach response
• V. Incident response and notification procedures compliant with GDPR, NDPR, and other regulations

8. DATA RETENTION

Personal Data is retained only for as long as necessary:

• I. To provide services and maintain accounts
• II. To comply with legal obligations
• III. To resolve disputes or enforce agreements
• IV. Usage data is retained longer for analytics, fraud prevention, or security purposes

9. COOKIES AND TRACKING TECHNOLOGIES

RHUCE uses cookies, web beacons, and analytics tags to:

• I. Maintain session and account information
• II. Understand platform usage patterns
• III. Serve targeted content and personalized recommendations
• IV. Measure advertising effectiveness

Users can manage cookies through browser settings. Full details are in the RHUCE Cookie Policy.

10. CROSS-BORDER DATA TRANSFERS

Personal Data may be transferred to countries outside your jurisdiction. RHUCE ensures:

• I. Legal transfer mechanisms are in place (e.g., GDPR Standard Contractual Clauses)
• II. Appropriate technical and organizational safeguards
• III. Transparency about the countries and types of data transferred

11. BREACH NOTIFICATION

In the event of a data breach:

• I. RHUCE will notify the relevant data protection authority within 72 hours (where required)
• II. Affected users will be informed of the breach, the nature of the data involved, and recommended mitigation steps
• III. Corrective actions and preventive measures will be implemented promptly

12. CHILDREN'S PRIVACY

RHUCE is intended for users 18 years and older. We do not knowingly collect Personal Data from minors. Parents or guardians who discover that a minor has provided data should contact support@rhuce.com immediately.

13. POLICY UPDATES

RHUCE reserves the right to amend this Policy. Material changes will be communicated via:

• I. Email notifications
• II. Prominent notices on the Services

Users are advised to review the Policy periodically. Continued use constitutes acceptance of changes.