Privacy Policy

1. Controller

Masiar Ighani
Augenbroicher Str. 104
53879 Euskirchen, Germany
Email: hello@getremoria.com

2. What Data We Collect

We collect and process the following personal data:

• Account data: Name, email address, and profile picture provided by your OAuth provider (GitHub or Google) when you sign up.
• Artifacts: Structured knowledge summaries you explicitly capture from AI chat conversations using the Remoria Chrome extension. These include the artifact title, summary, tags, source URL, and the raw structured block.
• Collections: User-created organizational groups for artifacts.
• Usage metadata: Timestamps of artifact creation and updates, conversation source URLs, and capture context (message position).
• Extension settings: Your configured API base URL and API token, stored locally in your browser via chrome.storage.

3. How We Use Your Data

• To provide and maintain the Remoria service (dashboard and extension).
• To authenticate you and secure your account.
• To store and organize your captured knowledge artifacts.
• To deduplicate artifacts so the same content is not stored twice.

4. Legal Basis (GDPR Art. 6)

• Contract performance (Art. 6(1)(b)): Processing your account data and artifacts is necessary to provide the service you signed up for.
• Legitimate interest (Art. 6(1)(f)): We process usage metadata to maintain, secure, and improve the service.

5. Data Storage and Security

Your data is stored in a PostgreSQL database. Data is transmitted encrypted via HTTPS. API authentication uses Bearer tokens and session-based authentication. Artifacts are scoped to your user account — no other user can access your data.

6. Chrome Extension

The Remoria Chrome extension operates on the following AI chat provider websites: ChatGPT (chatgpt.com), Claude (claude.ai), Gemini (gemini.google.com), Manus (manus.ai), and Perplexity (perplexity.ai).

The extension only activates when you explicitly click "Save" or "Capture". It does not read, collect, or transmit any data in the background. Your API token is stored locally in your browser and is only sent to the Remoria API when you capture an artifact.

7. Third-Party Services

• OAuth providers (GitHub, Google): Used for authentication. We receive your name, email, and profile picture. We do not access any other data from these providers.
• Stripe: Used for payment processing if you subscribe to a paid plan. Stripe processes your payment information directly — we do not store credit card details. See Stripe's Privacy Policy.

8. Data Retention

Your data is retained for as long as your account is active. If you delete your account, all associated data (artifacts, collections, settings) will be permanently deleted.

9. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

• Access your personal data (Art. 15)
• Rectify inaccurate data (Art. 16)
• Erase your data ("right to be forgotten", Art. 17)
• Restrict processing (Art. 18)
• Data portability (Art. 20)
• Object to processing (Art. 21)

To exercise any of these rights, contact us at hello@getremoria.com. You also have the right to lodge a complaint with a supervisory authority (in Germany: your state's data protection authority).

10. Cookies

We use only essential session cookies required for authentication. We do not use tracking cookies, analytics, or advertising cookies.

11. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the service after changes constitutes acceptance.

12. Contact

If you have any questions about this privacy policy, please contact:
Masiar Ighani — hello@getremoria.com