Privacy Policy

Immigranta is a UK-based AI assistant that helps people understand UK immigration rules. This policy explains what personal data we collect, why we collect it, and the rights you have over it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Immigranta is operated by Ruach Technologies Ltd, a company registered in England and Wales. We are the data controller for the personal data processed via this site and the chat product.

You can reach us about anything in this policy at hello@ruac.tech. Once we have a Data Protection Officer, that contact will be listed here too.

2. What we collect

We try to collect as little as possible. The categories below are the full list:

Account data. The email address you sign in with, and (if you sign in via Google or Apple) the basic profile name returned by that provider. We never see your social password.
Conversation data. The questions you type into the chat and the answers Immigranta returns, so we can show you your history and let you continue past threads.
Service logs. Standard server logs (IP address, request timestamp, user agent, error traces) kept for security, abuse prevention, and debugging.
Communications. If you email us, we keep the message thread so we can reply and follow up.
Usage analytics. Product and marketing analytics events (for example page views, clicks, and feature engagement), plus a pseudonymous identifier stored in browser local storage so we can recognise return visits. We do not store chat conversation content in analytics.

We do not collect special-category data (health, ethnicity, religion, etc.) and we ask that you don't share that kind of detail in chat. If you do, we'll treat it sensitively but it stays subject to this policy.

3. How we use it

To provide the chat product itself — answering your question and showing your history.
To keep the service running and secure (rate limiting, abuse detection, error triage).
To improve the product. This means reviewing aggregated, de-identified usage patterns and diagnosing specific bugs. We do not use your conversations to train AI models, ours or anyone else's.
To respond to support requests and legal obligations.

4. Lawful bases under UK GDPR

Performance of a contract (Article 6(1)(b)) — for delivering the chat product to a signed-in user.
Legitimate interests (Article 6(1)(f)) — for security, fraud prevention, product improvement (including product and marketing analytics), and answering support emails. We've balanced these against your privacy rights and believe they're proportionate. You can object at any time by emailing hello@ruac.tech.

We don't sell your personal data. We don't share it with third parties for their own marketing. The limited cases where we do share are:

Infrastructure providers who host the site and the chat backend (e.g. cloud compute, authentication, email delivery). They process data on our instructions only, under a UK GDPR Article 28 data-processing agreement.
Analytics providers — currently PostHog — who process usage events on our instructions to help us improve the product. They are not permitted to use that data for their own marketing of Immigranta users.
AI model providers who power the chat responses. We send the question plus the relevant context, configured so the provider does not retain or train on the input.
Law enforcement or regulators, only when we have a clear legal obligation and only the minimum required.

6. Cookies and Analytics

We use PostHog (hosted in the EU) on this marketing site and in the chat product to capture usage and interaction data — for example page views, clicks, and feature engagement — so we can diagnose issues, understand how people use Immigranta, and improve the service.

PostHog persists a pseudonymous session identifier in your browser's local storage (not advertising cookies). We also store essential preferences such as your light/dark theme in local storage so the site works as expected. Analytics is configured so that chat conversation content and personal documents are not captured or retained in the analytics tool.

We respect the browser Do Not Track (DNT) signal where present. If you object to analytics, email hello@ruac.tech and we will stop associating future analytics with you where we can identify your account; you can also clear site data for this domain in your browser to remove local identifiers.

We do not run advertising trackers or sell analytics data to third parties for their own marketing.

7. International transfers

Some of our infrastructure providers are based outside the UK. Where personal data is transferred outside the UK, we rely on UK adequacy regulations or the International Data Transfer Agreement (IDTA) with appropriate safeguards.

8. How long we keep data

Account data — for as long as your account is open.
Conversation history — until you delete it from the app or close your account, then up to 30 days in cold backups before final deletion.
Service logs — typically 30 days, longer only if needed to investigate a security incident.
Support emails — kept while the matter is active and for two years after.

9. Your rights

Under UK GDPR you can ask us to:

See a copy of the data we hold about you (right of access).
Correct anything that's wrong (right to rectification).
Delete your data (right to erasure), subject to legal obligations we have to keep it.
Stop or limit certain processing (right to object / restriction).
Get your data in a portable format (right to data portability).

Email hello@ruac.tech and we'll respond within 30 days. You also have the right to complain to the Information Commissioner's Office if you think we've handled your data badly — though we'd rather you came to us first so we can put it right.

10. Children

Immigranta isn't intended for under-16s. We don't knowingly collect data about children. If you believe a child has signed up, email us and we'll remove the account.

11. Changes

We'll update this policy as the product changes. Material changes will be flagged at the top of the page and (where we have your email) sent to you in advance.