Effective date: July 18, 2026
← Back to homeTable of Contents
This Privacy Policy ("Policy") describes how Alexander Carlson, operating as Rémis ("Rémis," "we," "us," or "our"), collects, uses, stores, protects, and discloses information obtained from users ("you," "your," or "User") of the Rémis platform, accessible at remis.business (the "Service"). Rémis is a sole proprietorship operated by Alexander Carlson, with a general locality in Indianapolis, Indiana, United States. The Service is offered solely to customers in the United States.
We are committed to protecting your privacy and handling your personal information with transparency and care. This Policy applies to all information collected through the Service, including our website, application interfaces, APIs, email communications, and any other channels through which you interact with Rémis.
By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the practices described in this Policy, you should not access or use the Service. This Policy is incorporated into and subject to our Terms of Service. Capitalized terms not defined herein shall have the meanings ascribed to them in the Terms of Service.
We collect information you provide directly, information generated through your use of the Service, and information collected automatically. The categories are described below.
When you create an account on Rémis, we collect your email address, which serves as your account identifier and is used for authentication and account-related communication. We do not collect or store passwords. The Service uses passwordless authentication: to sign in, our authentication provider (Supabase) sends a one-time secure sign-in link to your email address. Each sign-in therefore generates an authentication email to you. Because your email inbox is the key to your account, we recommend securing it carefully.
To generate AI-powered business reports and analyses, we collect company and organizational information that you voluntarily submit through our forms and interfaces. This may include, but is not limited to:
This company profile data is essential for the Service to generate meaningful, tailored reports. You should only submit information that you are authorized to share and that does not include sensitive personal data of third parties unless you have obtained appropriate consent.
Reports, assessments, and other outputs generated through your use of the Service are stored in association with your account and are accessible only to you unless you choose to share or export them. Generated content persists until you delete it or request account deletion, as described in Section 6.
We maintain records of your one-time credit pack purchases (transaction identifiers, amounts, and dates), your per-tool credit balances, credit consumption and restoration events, and usage information such as features accessed, timestamps of activity, and error logs related to your use of the Service.
When you access the Service, we automatically collect certain technical information from your device and browser, including your Internet Protocol (IP) address (used for security monitoring, rate limiting, and fraud prevention), browser type and version, device type, operating system, referring URL, and language and time zone settings. This technical data is collected through standard web server logging and security mechanisms.
All payment processing is handled exclusively by Stripe, Inc. ("Stripe"). Your credit card numbers and other sensitive payment details are collected, processed, and stored directly by Stripe; Rémis does not receive, process, transmit, or store your full payment card information at any time. Rémis receives and stores only limited transaction information from Stripe: transaction confirmation identifiers, purchase amounts, and payment success or failure status. Stripe's handling of your payment information is governed by Stripe's own Privacy Policy at https://stripe.com/privacy.
If you enter your email address on our demo page to request a link to get started, we store that email address (with its source page) in a leads table, separate from account data, and send you a single transactional email containing the requested link via our email provider, Resend. We do not use lead emails for marketing, and we will not send recurring or promotional email to lead addresses unless we first implement a compliant opt-in and unsubscribe mechanism and you consent. Lead emails are retained until you request their deletion (Section 6) and are never sold or shared for advertising.
We use the information we collect for the following purposes:
We do not sell, rent, lease, or trade your personal information to any third party. We do not use your company profile data, business information, or generated reports to train, fine-tune, or otherwise improve AI models. We may use anonymized, aggregated, and de-identified data that cannot reasonably be used to identify you for research, analytics, and service improvement; such anonymized data is not considered personal information under this Policy.
Rémis uses artificial intelligence to generate reports, analyses, and assessments based on the company profile data you provide. It is important that you understand how your data is processed in this context.
When you request a report or analysis, the relevant company profile data you have submitted is transmitted to Anthropic, PBC ("Anthropic") via secure API connections for the sole purpose of generating the requested output. Anthropic's Claude API is the Service's AI provider.
We use Anthropic under its standard commercial API terms. Under those terms, data submitted through API calls is not used by Anthropic to train its models. Anthropic processes the data to generate the requested output and may retain inputs and outputs for limited periods for abuse monitoring, safety, and legal compliance, in accordance with its published data handling policies.
Several tools use the AI provider's built-in web search capability to gather publicly available information relevant to your report (such as vendor pricing, industry benchmarks, and regulatory updates). Search queries are composed by the AI model during generation and may incorporate business context you provided — for example, your industry, location, the software you use, or your company name — where the model judges it relevant to the research. Searches are executed by the AI provider's search infrastructure; the websites returned as results do not receive your account details, and Rémis does not share your data directly with any search engine. If you do not want particular information used in this way, do not include it in your inputs.
AI-generated outputs may contain inaccuracies, outdated information, or errors, and vary from run to run. All reports and analyses are provided for informational purposes only and do not constitute professional, legal, financial, or compliance advice. You should independently verify all AI-generated content before relying on it for business decisions.
We take the security of your information seriously and implement industry-standard technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.
The Service's application is hosted on Vercel, and its database and authentication are hosted on Supabase. Data is stored in secure data centers located in the United States that maintain physical security controls, environmental safeguards, and access restrictions.
Authentication is passwordless and managed through Supabase:
All data transmitted between your browser and the Service, as well as between the Service and third-party providers, is encrypted using HTTPS with TLS (Transport Layer Security) protocols. We enforce HTTPS across all endpoints and do not permit unencrypted connections.
Administrative access to infrastructure and databases is limited and protected by strong authentication mechanisms. Access to user data is limited to what is necessary to operate the Service.
While we implement reasonable security measures, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of your information. You acknowledge that you provide your information at your own risk and that you are responsible for maintaining the security of your email account, which is used to sign in.
We retain information as follows:
Account deletion is not currently automated. To request deletion of your account and associated data, contact us through the channel listed in Section 15. Upon receiving and verifying a deletion request, we will manually and permanently delete your account data, including:
The "Clear browser data" controls in the Service's settings remove only data stored in your own browser; they do not delete server-stored data.
We may retain anonymized, aggregated, and de-identified data indefinitely for research, analytics, and service improvement purposes. This data cannot reasonably be used to identify any individual user and is not subject to deletion requests.
Notwithstanding the above, we may retain certain information for longer periods if required by applicable law, regulation, or legal process, or if necessary to establish, exercise, or defend legal claims.
Cookies are small text files placed on your device by your web browser when you visit a website. We use cookies and similar technologies as described below.
We use strictly necessary cookies that are essential for the operation of the Service. These include session management cookies that maintain your authenticated state as you navigate the platform, as well as security cookies that help protect against cross-site request forgery (CSRF) and other common web vulnerabilities. These cookies are required for the Service to function and cannot be disabled without impairing core functionality.
Rémis uses privacy-friendly, cookieless analytics (Vercel Web Analytics) to understand aggregate usage of the Service, such as page views and approximate visitor counts. This service does not set analytics or tracking cookies, does not track you across other websites, and does not collect personally identifiable information. We do not use advertising, retargeting, or cross-site tracking analytics. If we introduce analytics that rely on cookies in the future, we will update this Policy and provide a cookie consent mechanism that allows you to opt in or opt out before deploying such cookies.
Rémis does not use advertising cookies, retargeting pixels, or any form of ad-related tracking technology. We do not participate in ad networks or serve targeted advertisements.
Some browsers transmit "Do Not Track" (DNT) signals to websites. Because there is no universally accepted standard for how to respond to DNT signals, we do not currently respond to DNT signals. However, as stated above, we do not engage in cross-site tracking or advertising-related tracking.
The Service integrates with and relies upon the following third-party service providers. Each operates under its own privacy policy, which we encourage you to review.
We select third-party providers that maintain reasonable security practices and data protection measures. However, we are not responsible for the privacy practices or security of these third-party services. Your interactions with these providers are governed by their respective privacy policies.
Depending on your jurisdiction, you may have certain rights regarding your personal information. Rémis is committed to honoring these rights to the extent required by applicable law. You may exercise any of the following rights by contacting us at our LinkedIn page.
You have the right to request a copy of the personal information we hold about you. Upon verification of your identity, we will provide you with a summary of the categories of personal information collected, the purposes for which it is used, and the third parties with whom it has been shared.
You have the right to request correction of any inaccurate or incomplete personal information we hold about you. You may update certain account information directly through the Service, or you may contact us to request corrections to information that cannot be modified through the platform.
You have the right to request deletion of your personal information, subject to certain exceptions. Deletion is performed manually as described in Section 6.2. We may retain certain information as required by law or for legitimate business purposes, such as fraud prevention or dispute resolution.
You may export your generated reports from within the Service while logged in, using the built-in download functionality. If you require assistance with data export, contact us before requesting account deletion — export tooling is not available after your data has been deleted.
To exercise any of the rights described above, please send a written request through the contact channel in Section 15. In your request, please clearly describe the right you wish to exercise and provide sufficient information for us to verify your identity. We will respond to verified requests as promptly as we reasonably can, and within any period required by applicable law. We will not discriminate against you for exercising your privacy rights.
This section applies to California residents to the extent the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, "CCPA"), applies to Rémis. Rémis may not currently meet the CCPA's thresholds for a covered "business"; we nonetheless describe our practices here in the interest of transparency and will honor the rights below to the extent the CCPA applies.
In the preceding twelve (12) months, we have collected the following categories of personal information as defined by the CCPA: identifiers (email address, IP address); commercial information (purchase and credit records); internet or other electronic network activity information (usage data within the Service); and professional or employment-related information (company profile data submitted by you).
Rémis does not sell your personal information as defined by the CCPA. We do not share your personal information for cross-context behavioral advertising purposes. We have not sold or shared personal information in the preceding twelve (12) months.
To the extent the CCPA applies, California residents have the right to: know what personal information we collect, use, and disclose; request deletion of personal information, subject to certain exceptions; correct inaccurate personal information; opt out of the sale or sharing of personal information (though Rémis does not sell or share personal information as defined by the CCPA); limit the use and disclosure of sensitive personal information, if applicable; and not be discriminated against for exercising these rights. To exercise these rights, contact us through the channel in Section 15. You may designate an authorized agent to make a request on your behalf, provided the agent can demonstrate proper authorization.
The Service is operated from the United States, is offered solely to customers located in the United States, and is not directed to individuals in the European Economic Area, United Kingdom, Switzerland, or any other jurisdiction outside the United States. All data collected through the Service is stored and processed in the United States. If you access the Service from outside the United States despite this, you do so on your own initiative and acknowledge that your information will be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your jurisdiction.
The Service is not intended for, directed at, or designed to be used by individuals under the age of eighteen (18). Rémis is a business-oriented SaaS platform, and we expect all users to be adults capable of entering into binding legal agreements.
We do not knowingly collect, solicit, or receive personal information from individuals under the age of eighteen (18). If we become aware that we have collected personal information from a minor, we will take prompt steps to delete such information from our records. If you are a parent or guardian and believe that your child under the age of eighteen (18) has provided personal information to Rémis, please contact us immediately through the channel in Section 15 so that we can take appropriate action.
We reserve the right to modify, amend, or update this Privacy Policy at any time. When we make material changes, we will update the "Effective date" at the top of this page and notify account holders by email to the address associated with their account. A change in the effective date alone, without notice, will not be used to impose material changes. We encourage you to review this Policy periodically.
Your continued use of the Service after any changes to this Policy become effective constitutes your acceptance of the revised Policy. If you do not agree with the terms of the updated Policy, you must discontinue your use of the Service and may request deletion of your account and personal information in accordance with Section 6.
In the event of a security breach that results in the unauthorized access, acquisition, disclosure, or use of your personal information, we will notify affected users without unreasonable delay, and within any period required by applicable law, via email to the address associated with the affected account. The notification will include, to the extent known at the time:
We will also notify applicable regulatory authorities as required by law, and will take all reasonable steps to contain and remediate any breach as quickly as possible.
If you have any questions, concerns, or requests regarding this Privacy Policy, our data practices, or the exercise of your privacy rights, please contact us at:
We will make reasonable efforts to respond to all legitimate inquiries promptly. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority, where applicable.
This Privacy Policy is governed by and construed in accordance with the laws of the State of Indiana, United States, without regard to its conflict of law provisions.