How we handle data

If you are logged in, a completed review (the question, transcript and review PM) is saved to your account under My reviews, until you delete it yourself. Without logging in you can only play the demo — a prerecorded example where no models are called — and it is never saved.

If you have an account, we also store your credit balance and one ledger row per transaction (amount and reason) — never the question text or model answers in that system.

To see whether the product works we also store simple product events on your account (signup, first run started/completed, credit purchase) — only the event type and timestamp, never your IP address or question text, and no third-party tracking.

If you arrive via a campaign link (?ref=code) or a shared review, your signup can be tagged with that channel (the campaign code or "share"). The tag waits in the tab's sessionStorage — no cookie, no third-party code, no fingerprinting — and is only sent if you create an account yourself (within one hour; otherwise it expires). When someone opens a shared review we also increment an anonymous counter ("a shared view was read") — with no IP address, no account and no link to the specific share.

You can download everything Remiss stores about you — account, preferences, credit ledger and your reviews with transcripts — as a JSON file under Settings at any time (access and data portability, GDPR art. 15 and 20).

From the same page you can also permanently delete your account. Deletion removes everything at once — reviews, transcripts, the credit ledger and shared links — and is confirmed with your own email address (right to erasure, art. 17). Unused credits are not refunded.

Account data, saved reviews, credit balance, ledger rows and shared links live in Supabase. That is the product's working memory: the part that lets you return to a review, share it or see your balance.

Payments run through Stripe Checkout and Stripe webhooks. Remiss stores that credits were added and why the transaction was created. Card details are handled by Stripe, not by Remiss.

Standard runs only against Mistral, directly at api.mistral.ai. The question is processed only within the EU.

That does not mean we can add a zero-retention promise on top of Mistral's own terms. It means Standard is the route we built for questions where EU routing matters most.

Deep review is stronger for important decisions because several labs review the same question. It routes through OpenRouter to models from Anthropic, OpenAI, Google, xAI and DeepSeek, primarily outside the EU. If you choose that level, the question may leave the EU.

Retention and zero-retention behavior then follow OpenRouter and each provider's terms. We have not independently verified every subcontractor's practical retention behavior in this version.

We limit the number of deliberations per IP address (rate-limit) and require enough credit balance before a run starts (credit gate) — both checks happen server-side, before any model is called.

For questions that must not leave the EU: choose Standard. It routes only to Mistral via api.mistral.ai, not via OpenRouter or US-hosted models.

Shared read links to a saved review expire automatically after 30 days. You can delete a saved review at any time under My reviews.

A formal DPA and procurement pack are in progress — this page describes current technical behavior, not a finished contract.

This is our current technical picture, not a finished DPA or a complete legal policy. Full terms and a formal data processing agreement are still open items.