Snapshot 103259
Normalized text
Scripts and page chrome removed; this is what change detection compares.
NewRustDesk 1.5.0: WebRTC Direct Connections and QoS Improvements » Privacy Policy Effective date: 16 September 2026 This Privacy Policy (hereinafter the “Policy”) governs the terms and conditions under which Purslane Tech Pte. Ltd. (hereinafter “us” or “we”), processes personal data in connection with the activities and services concerning the operation of the website rustdesk.com and other websites or social media profiles run and managed by us (hereinafter the “Websites”), and in connection with the RustDesk software and the services we operate for it. We are the controller of the personal data described in this Policy. You can reach us at: Purslane Tech Pte. Ltd. 68 Circular Road, #02-01, Singapore 049422 [email protected] If you have a question about this Policy, or about how we process your personal data, write to us at that address and we will answer. We are serious about protecting your personal data and want you to feel safe and comfortable while browsing our Websites. We therefore respect the confidentiality of your personal data and always proceed in accordance with the provisions of data protection legislation, in particular, Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, hereinafter the “GDPR”), and follow this Policy. With respect to the above, we use this Policy to inform you about how, for what purposes and to what extent we use your personal data and what information about you as a user of the Websites we may process. 1. Definitions “Personal data” means any information relating to a data subject; “Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; “Data subject” means any identified or identifiable person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person; “Data processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller; “Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. 2. Basic information about personal data processing conducted by us We always process your personal data lawfully, fairly, in a transparent manner and for specified, explicit and legitimate purposes. We process personal data only to the minimum necessary extent and we keep them in a form which permits your identification for no longer than is necessary vis-à-vis the purpose of the processing. We process your personal data in a manner that sufficiently ensures their integrity and confidentiality, i.e. by appropriate technical or organizational measures and appropriate protection against unauthorized or unlawful processing and against loss, destruction or damage. We take care to ensure that personal data that are inaccurate, having regard to the purpose for which we process them, are erased or rectified without delay. We respect the principle of refraining from personal data processing and the principle of data minimization. We therefore only retain your personal data if it is necessary in order to achieve the purpose of the processing or for various retention periods specified by law. The relevant data are erased in accordance with the law if the relevant purpose ceases to exist as a result of the withdrawal of your consent and/or upon the expiration of the lawful retention period. For the above reasons, we use computer security such as a firewall and data encryption to operate our Websites. We have implemented adequate physical, electronic and procedural safeguards and use reliable IT service providers. However, given the nature of the internet, we would like to bring to your attention the fact that certain security gaps may exist in the transmission of personal data via the internet (e.g. in communication via e-mail) and that full protection of personal data preventing third party access is impossible. 3. Legal ground, purpose and extent of the processing of your personal data We may process your personal data for the following legal grounds and for the following purposes: a. Provision and improvement of and support for our Websites We process various information about your online activity, e.g. the time of access to our Websites, the time spent on our websites, conversions (i.e. completed activity on our Websites), etc., for the purposes of technical support and improvement of our Websites as well as monitoring of functionalities thereof (for details regarding the extent of the data being processed see Section 3 (c) and (d) of this Policy). Where we carry out that processing through the analytics cookies described in Section 3 (c), we do so on the lawful ground of your consent, and we stop if you withdraw it. Where we process your personal data in order to operate and secure the Websites without those cookies, for example in the server logs needed to deliver the pages you request and to detect abuse, we do so under the lawful ground of legitimate interest (operation of the Websites and data security). b. Processing of the personal data of the visitors to the Websites If you publish any personal data on our Websites, we may process such personal data to the extent published for the purpose of responding to your post. Usually, we process following personal data categories on our Websites: your name, surname and any personal data which you upload on the Websites or which we receive via personal messages. For these purposes of personal data processing, we process the above mentioned personal data under lawful ground of negotiation and performance of a contract (customer and technical support under the RustDesk software license agreement concluded between us and yourself) and legitimate interest (general communication between us and yourself). c. Cookies We use various cookie files, which may contain your personal data (e.g. your IP address or the configuration of your browser and computer). We use cookies on the basis of your consent that you express via the cookies settings displayed to you in a banner during your first visit to our Websites. No cookie other than those strictly necessary to operate the Websites is set before you give that consent. You can change or withdraw your consent at any time through the “Cookie settings” link in the footer of our Websites. d. RustDesk To provide you with the RustDesk software application and to constantly improve our services including customer support, we process following personal data about you and your device: start of the RustDesk software application, IP-address of the device, statistical information about your computer (e.g. CPU-type, screen resolution), time and duration of RustDesk software sessions and RustDesk-IDs of the RustDesk’s session participants. We process the personal data acquired via the RustDesk software under lawful grounds of performance of a contract (performance of RustDesk software license agreement concluded between us and yourself including customer support) and our legitimate interest (RustDesk software development). 4. Who we share your personal data with We do not sell your personal data. We share it only with service providers, and only to the extent described in this Section. The categories of those providers are: analytics providers, for the website usage statistics described in Section 3 (a) and (c) — currently Google, through Google Analytics 4; payment providers, for processing your payment when you buy a license — currently Stripe. Your card details are collected directly by the payment provider; we do not receive or store them; hosting, infrastructure and communication providers, for the operation of the Websites, of the public ID and relay servers, and of our support and email channels. Most of these providers act as our processors and handle your personal data only on our instructions. Some also act as controllers in their own right, for their own purposes, which we do not determine and which their own privacy notices govern. In particular, Stripe processes payment data as an independent controller in order to prevent fraud, to meet its own legal and regulatory obligations, and to improve its services; its Privacy Policy and Data Processing Agreement describe that processing. We may also disclose personal data where the law requires us to, where it is necessary to establish, exercise or defend a legal claim, or where it is necessary to protect the rights and safety of another person. 5. Transfers of your personal data to other countries We are established in Singapore, and the service providers described in Section 4 process personal data in the United States and in other countries. Your personal data may therefore be transferred outside the country in which you live, including outside the European Economic Area. Where we transfer personal data out of the European Economic Area, we do so on the basis of the European Commission’s standard contractual clauses, or on the basis of the recipient’s certification under the EU–US Data Privacy Framework where that applies. You can ask us for details of the safeguards we rely on by writing to [email protected]. 6. How long we keep your personal data We keep personal data only for as long as we need it for the purpose for which we collected it, and then delete it. How long that is depends on the data: website analytics data — for the retention period configured in Google Analytics, after which it is deleted automatically; records relating to a license you have bought, including invoices — for as long as the license is active, and afterwards for the period for which we are required to keep accounting records under Singapore law; support correspondence — for as long as it is needed to deal with your request and any follow-up, and afterwards for as long as it may be needed to establish, exercise or defend a legal claim. Where the law requires us to keep something for longer, we keep it for that longer period and use it only for that purpose. You can ask us what applies to your own data by writing to [email protected]. 7. Your rights Subject to the conditions and exceptions of the applicable law, you have the right to: ask us whether we process personal data about you, and to receive a copy of it; have inaccurate personal data about you corrected, and incomplete personal data completed; have your personal data erased; have our processing of your personal data restricted; receive the personal data you have provided to us in a structured, commonly used and machine-readable format, and to have it transmitted to another controller; object, at any time and on grounds relating to your particular situation, to processing that we carry out on the ground of legitimate interest; withdraw your consent at any time where we process your personal data on the basis of consent. Withdrawing your consent does not affect the lawfulness of the processing carried out before you withdrew it. To exercise any of these rights, write to [email protected]. We will respond within one month of receiving your request. We do not charge for this, unless a request is manifestly unfounded or excessive. 8. Complaints If you believe that we have processed your personal data unlawfully, please tell us first at [email protected] so that we have the chance to put it right. You also have the right to lodge a complaint with a data protection supervisory authority — in the European Economic Area, the authority of the country in which you live, in which you work, or in which you believe the infringement took place. 9. Automated decision-making We do not use your personal data to make decisions about you by automated means that produce legal effects concerning you or that similarly significantly affect you, and we do not carry out profiling of that kind. 10. Changes to this Policy We may update this Policy. The effective date at the top of this page shows when the current version took effect, and we post any updated version on this page. Where a change materially affects how we process your personal data, we will take reasonable steps to bring it to your attention.