Privacy Policy

1. Introduction

Ruten Inc. ("the Company," "we," "us," or "our"), a Cambridge, Massachusetts corporation that builds closed-loop brain-machine interface middleware for neuro-rehabilitation device makers, operates the website rutenneuro.com (the "Service"). This Privacy Policy explains what information the Company collects, how it is used, and the choices available to you. It applies to information we collect through the Service and through direct communications with you.

The Company is based at 245 First Street, Suite 1800, Cambridge, MA 02142 and can be reached at [email protected] or +1 (617) 294-2100.

Ruten's core product is a middleware SDK that decodes neural electrode signals in real time and drives nerve stimulation for rehabilitation device engineers. This website -- rutenneuro.com -- is our marketing and developer-information site. It does not process patient health records, clinical trial data, or any signals generated by a neural interface or implanted device. Device makers who integrate the Ruten SDK into their own products remain responsible for the data-handling obligations that arise from their own use of that SDK in clinical or research settings.

2. Information We Collect

2.1 Information You Provide

We collect information you submit directly through rutenneuro.com, including:

• Contact details (name, email address, phone number) when you complete an inquiry form, apply for early SDK access, or submit a research partnership application;
• Institutional or company information you choose to share (employer, role, device project context, research institution);
• The content of messages you send through the site's contact and research-application forms.

This information is used to respond to developer inquiries and evaluate research-partner and early-access applications. We do not use contact form submissions to build advertising profiles.

2.2 Information Collected Automatically

When you visit rutenneuro.com, we automatically collect limited technical information:

• IP address and approximate location (city/region level);
• Browser type, operating system, device class;
• Pages visited, referring URLs, time on page;
• Cookie and similar identifiers (see Section 5 and our Cookie Policy).

This data helps us operate the site and understand how engineers and researchers navigate the SDK documentation and platform pages. It is not linked to identifiable individuals in our analytics layer.

2.3 No Neural or Clinical Data Collected Through This Website

The Ruten SDK processes neural electrode signals on the device maker's own embedded hardware. That signal data does not pass through rutenneuro.com and is not subject to this Policy. This website does not collect biometric data, health information, or any data generated by a neural interface, electrode array, or rehabilitation device.

2.4 We Do Not Knowingly Collect Children's Data

rutenneuro.com is directed at professional device engineers and academic researchers, not children. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact [email protected] and we will delete it.

3. How We Use Information

We use the information we collect to:

• Respond to technical and partnership inquiries from device engineers and research labs;
• Evaluate and process applications for the early-access SDK program and the research integration partnership;
• Operate, maintain, and improve the Service and developer-facing documentation;
• Send service updates and (with your consent where required) communications about the Ruten SDK, API updates, and neuro-rehabilitation research developments;
• Detect, investigate, and prevent fraud or abuse of the Service;
• Comply with legal obligations under US federal law and Massachusetts law.

We do not sell personal information for monetary value. Where applicable state law treats certain advertising arrangements as a "sale" or "share," see your state's section below.

4. Sharing of Information

We share personal information only with:

• Service providers acting on our behalf (for example, web hosting, transactional email delivery, self-hosted analytics) under contractual confidentiality terms that prohibit independent use of the data;
• Authorities, when required by law, regulation, or court order, or to protect the rights, safety, or property of the Company or others;
• A successor entity in the event of a merger, acquisition, or asset sale, subject to this Policy.

We do not sell personal information to third parties, and we do not share device-project or research information submitted through application forms with outside parties except as described above.

5. Cookies and Tracking

We use cookies and similar technologies to operate the site, remember preferences, and measure how engineers and researchers navigate the documentation and platform pages. For details and choices, see our Cookie Policy.

6. Data Retention

We retain personal information only as long as needed for the purposes described, to comply with legal or accounting obligations, and to resolve disputes. Specifically:

• Early-access and research-partner application records are retained for the duration of the partnership and for 24 months thereafter;
• Inactive inquiry contacts are purged after 24 months from last interaction;
• Server access logs are retained 90 days, then aggregated and stripped of identifying detail.

7. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including TLS encryption in transit, restricted-access databases, and least-privilege access controls. No system is perfectly secure; we cannot guarantee absolute security. If you have a security concern, contact us at [email protected].

8. Your General Rights

Depending on your jurisdiction, you may have rights including access to, correction of, deletion of, and the ability to limit processing of personal information we hold about you. To make a request, email [email protected] with a description of your request. We will respond within the timeframe required by applicable law.

9. Massachusetts Residents

Massachusetts does not currently have a comprehensive consumer privacy statute. As a matter of policy, the Company extends the following baseline rights to all U.S. residents regardless of state of residence.

9.1 Baseline Rights

• Right to Know: request the categories of personal information we have collected about you.
• Right to Delete: request deletion of personal information you have provided.
• Right to Correct: request correction of inaccurate personal information.
• Right to Opt Out of Marketing: unsubscribe from marketing emails or opt out via the unsubscribe link in each marketing message.

9.2 How to Exercise

Email [email protected] with a description of your request and enough detail for us to verify your identity. We respond within 45 days.

9.3 Sector-Specific Rights

If you are protected by federal sector laws (for example, HIPAA, GLBA, or FERPA), those laws may give you additional rights with respect to data covered by them. Because rutenneuro.com does not process patient health records or clinical trial data, HIPAA's privacy rules do not govern data collected through this website. Device makers who integrate the Ruten SDK into HIPAA-covered workflows bear their own HIPAA obligations with respect to the data they process.

9.4 California Visitors

If you are a California resident, you may also exercise the rights granted under the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA"), including the right to know, the right to delete, the right to correct, and the right to opt out of sale or sharing. We do not sell personal information and do not "share" personal information for cross-context behavioral advertising.

To submit a CCPA / CPRA request, email [email protected] with the subject line "California Privacy Request."

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by a new "Last updated" date at the top of this page and, where appropriate, a notice on the Service.

11. Contact

Questions, requests, or complaints regarding this Privacy Policy can be sent to: