Privacy Policy &
Data Security Standards

At Remaindme, we understand that executive decisions, founder commitments, board deliberations, and strategic relationship context constitute the most sensitive data in your enterprise.

Our system is built with a zero-compromise security posture: every interaction is scoped strictly to your authenticated workspace, encrypted using authenticated ciphers, and processed through stateless inference engines that maintain zero retention of your intellectual property.

Remaindme interacts with Large Language Models (LLMs) strictly through enterprise APIs backed by commercial agreements that mandate:

We collect only the minimum required operational data necessary to deliver your executive AI Chief of Staff:

• Tenant Identity & Authentication: Work email address, full name, organization title, and hashed credentials for secure session provisioning.
• Commitments & Risk Metadata: Task deliverables you owe to colleagues, items others owe to you, deadlines, risk scoring flags, and follow-up timestamps.
• Strategic Decisions & Memory: Decisions dictated or logged, rationale context, stakeholders involved, and historical memory items.
• Audio & Voice Memos: Short audio streams captured for speech-to-text transcript extraction. Audio buffers are processed ephemerally and discarded after transcription.

All data stored in Remaindme utilizes multi-layered cryptographic safeguards:

• Encryption at Rest (AES-256-GCM): Database columns containing sensitive task titles, descriptions, notes, and relationship details are encrypted at rest with hardware-accelerated AES-256-GCM authenticated ciphers.
• Encryption in Transit (TLS 1.3): All network traffic between your client device and our servers is enforced with modern TLS 1.3 protocols, Elliptic Curve Diffie-Hellman Key Exchange (ECDHE), and forward secrecy.
• Offline Storage Isolation: Client-side offline caches (IndexedDB) operate strictly within the browser sandbox and are encrypted where supported by the operating system.

We maintain a strict zero-monetization policy. We never sell, rent, broker, or license your personal or organizational intelligence to data brokers, ad networks, or third-party aggregators.

Sub-processors are engaged strictly for vital infrastructure services (e.g. Supabase / PostgreSQL database hosting, enterprise cloud inference, and transactional email / SMS notification delivery) under Data Processing Agreements (DPAs) compliant with GDPR and SOC 2 Type II controls.

You retain unencumbered intellectual property and legal ownership over every byte of information stored in Remaindme:

• 1-Click Complete Export: Export your complete historical record—including commitments, relationship graphs, and decision registers—in standard structured JSON or CSV format at any time directly in your account settings.
• Permanent Cryptographic Erasure: Initiating an account deletion executes a hard deletion across active databases, invalidating cryptographic keys and removing all associated tenant records permanently.

If you have questions regarding this Privacy Policy, enterprise security evaluations, or wish to exercise data subject rights, please reach out to our dedicated privacy and governance team: