Draft for legal review. Highlighted items must be confirmed by RUSH before publishing.
Legal · Privacy
Regional Privacy Policys
Last updated: 20 October 2026
These notices add to our Privacy Policy for people in specific places. If something here differs from the main notice, this page applies to you.
India: Digital Personal Data Protection Act, 2023
- Notice and consent. Where we rely on consent, we ask for it clearly, for a stated purpose, and you can withdraw it at any time by emailing [To confirm: privacy contact email, e.g. privacy@rush.tech].
- Your rights as a Data Principal: a summary of your personal data and how it is processed; correction, completion, updating and erasure; grievance redressal; and nominating a person to act for you.
- Grievances go first to our Grievance Officer (see the Privacy Policy). You may then approach the Data Protection Board of India.
- Breaches are reported to the Data Protection Board and to affected people as the DPDP Rules, 2025 require.
- Children: we do not knowingly process personal data of anyone under 18.
European Union and United Kingdom: GDPR
- Controller: RUSH Technology Ventures Private Limited. EU representative: [To confirm: EU/UK representative under Article 27, if required].
- Legal bases are listed in section 3 of the Privacy Policy.
- Your rights: access, rectification, erasure, restriction, objection (including to direct marketing at any time), data portability, and withdrawing consent without affecting earlier processing.
- Transfers outside the EEA or UK use Standard Contractual Clauses or another recognised safeguard.
- Complaints: you can complain to the data protection authority where you live or work.
California: CCPA as amended by the CPRA
If the CCPA applies to us, California residents have these rights:
- Right to know the categories and specific pieces of personal information we collected, the sources, purposes, and who we disclosed it to.
- Right to delete and right to correct personal information, subject to legal exceptions.
- Right to opt out of the sale or sharing of personal information. We do not sell personal information or share it for cross-context behavioural advertising. You can still set your preferences under "Your privacy choices", and we honour Global Privacy Control signals.
- Right to limit use of sensitive personal information. We do not use it for purposes that require this right.
- Non-discrimination for using any of these rights.
| Category (CCPA) | Examples | Collected in the last 12 months |
|---|---|---|
| Identifiers | Name, email, IP address | Yes |
| Professional information | Company, role | Yes |
| Internet activity | Pages viewed, browser data | Yes |
| Sensitive personal information | Government IDs, financial account details | No |
To make a request, email [To confirm: privacy contact email, e.g. privacy@rush.tech]. An authorised agent may act for you with your written permission.
Gulf Cooperation Council
For people in Saudi Arabia (Personal Data Protection Law) and the United Arab Emirates (Federal Decree-Law No. 45 of 2021), we process personal data on the bases and with the rights described in the Privacy Policy, and transfer it abroad only where those laws allow. Requests go to [To confirm: privacy contact email, e.g. privacy@rush.tech].