Remalt
← Back to Home

Privacy Policy

Last updated: December 18, 2024

1. Introduction

Remalt ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at https://remalt.com, our web application, and our Chrome browser extension ("Remalt Capture") (collectively, the "Services").

By using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not access the Services.

2. Information We Collect

2.1 Information You Provide

  • Account Information: When you create an account, we collect your email address, name, and password (encrypted).
  • Profile Information: Optional information you choose to add to your profile, such as profile picture.
  • Content: Any content you create, upload, or store using our Services, including workflows, text, images, documents, and links.
  • Communications: Information you provide when you contact us for support or feedback.
  • Payment Information: If you subscribe to paid features, our payment processor (Stripe) collects payment details. We do not store full credit card numbers.

2.2 Information Collected Automatically

  • Usage Data: Information about how you use our Services, including features accessed, actions taken, and time spent.
  • Device Information: Browser type, operating system, device identifiers, and IP address.
  • Cookies and Tracking: We use cookies and similar technologies for authentication, preferences, and analytics.

2.3 Chrome Extension Data Collection

Our Chrome extension ("Remalt Capture") collects the following data to provide its functionality:

  • Page URL and Title: When you choose to capture a page, we collect the URL and title of that specific page.
  • Page Metadata: Open Graph tags, meta descriptions, and thumbnail images from pages you capture.
  • Selected Content: Text, images, or links you explicitly select and choose to capture.
  • Authentication State: We store your authentication token locally to keep you logged in.

Important: The extension only collects data when you actively choose to capture content. We do not passively monitor your browsing activity, collect browsing history, or track pages you visit without your explicit action.

3. How We Use Your Information

We use the collected information for the following purposes:

  • Service Delivery: To provide, maintain, and improve our Services.
  • Account Management: To create and manage your account, authenticate your access, and process transactions.
  • Content Storage: To store and organize your captured content, workflows, and projects.
  • AI Processing: To process your content through AI models when you use AI features (chat, analysis, generation).
  • Communication: To send you service updates, security alerts, and support messages.
  • Analytics: To understand usage patterns and improve our Services.
  • Legal Compliance: To comply with legal obligations and protect our rights.

4. AI and Third-Party Services

Our Services integrate with third-party AI providers to deliver AI-powered features. When you use these features:

  • AI Providers: Content you submit for AI processing may be sent to providers including Google (Gemini), OpenAI, Anthropic, and DeepSeek via OpenRouter.
  • Processing: These providers process your content to generate responses. Their use of data is governed by their respective privacy policies.
  • No Training: We configure our API usage to opt out of having your content used for model training where such options are available.

Other third-party services we use include Supabase (database and authentication), Stripe (payments), Deepgram (voice transcription), and Uploadcare (file storage).

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

  • Service Providers: With third-party vendors who assist in operating our Services (hosting, analytics, payment processing).
  • Legal Requirements: When required by law, legal process, or government request.
  • Protection of Rights: To protect our rights, privacy, safety, or property, and that of our users.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets.
  • With Your Consent: When you explicitly authorize us to share information.

6. Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

  • Encryption of data in transit (HTTPS/TLS) and at rest
  • Secure authentication with encrypted password storage
  • Row-level security policies in our database
  • Regular security assessments and updates
  • Access controls limiting employee access to user data

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide you Services. We may retain certain information as required by law or for legitimate business purposes, including:

  • Transaction records for tax and accounting purposes
  • Data necessary to resolve disputes or enforce agreements
  • Anonymized analytics data that cannot identify you

You may request deletion of your account and associated data at any time (see Your Rights section).

8. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of your personal data.
  • Correction: Request correction of inaccurate data.
  • Deletion: Request deletion of your data.
  • Portability: Request your data in a portable format.
  • Objection: Object to certain processing of your data.
  • Restriction: Request restriction of processing.
  • Withdraw Consent: Withdraw consent where processing is based on consent.

To exercise these rights, contact us at privacy@remalt.com.

9. Children's Privacy

Our Services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected, used, shared, or sold
  • Right to delete personal information held by us
  • Right to opt-out of sale of personal information (we do not sell personal information)
  • Right to non-discrimination for exercising your rights

12. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

  • Legal basis for processing: We process data based on consent, contract performance, legal obligations, and legitimate interests.
  • You have the right to lodge a complaint with your local supervisory authority.
  • For data transfers outside the EEA, we rely on Standard Contractual Clauses or other approved mechanisms.

13. Chrome Extension Specific Disclosures

In compliance with Chrome Web Store policies, we provide the following additional disclosures for the Remalt Capture extension:

  • Single Purpose: The extension's single purpose is to allow users to capture and save web content (links, text, images) to their Remalt account.
  • Permissions Justification:
    • activeTab: Required to access the current page URL and title when you click capture.
    • storage: Required to store your authentication state locally.
    • contextMenus: Required to provide right-click capture functionality.
    • scripting: Required to extract page metadata and show capture confirmations.
    • host_permissions: Required to fetch metadata from any page you choose to capture.
  • Data Handling: Captured content is transmitted securely to our servers and stored in your account. You retain full ownership and can delete captured items at any time.
  • No Remote Code: The extension does not execute remotely hosted code.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Terms of ServiceHome