Privacy Policy

Rami Labs ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our platform.

1. Company Information

Legal Business Name: Rami Labs
KVK Number: 96410175
Address: Eerste Keucheniusstraat 37-2, 1051 HP Amsterdam, The Netherlands
Contact Email: legal@ramilabs.com
Data Protection Contact: Ramiro Ramirez (Owner)

2. Information We Collect and Legal Basis

Under the General Data Protection Regulation (GDPR), we collect and process your data based on the following legal grounds:

• Personal Information
  • - Email address (Legal basis: Consent, Contract performance)
    Purpose: Account creation, authentication, communications
  • - Name (Legal basis: Contract performance)
    Purpose: Account identification, personalized service
  • - Payment information (Legal basis: Contract performance)
    Purpose: Processing payments, fraud prevention
• Usage Data (Legal basis: Legitimate interests)
  • - How you interact with our tools
    Purpose: Service improvement, user experience optimization
  • - Platform usage statistics
    Purpose: Performance monitoring, service optimization
  • - Performance and error data
    Purpose: Technical support, service reliability
• AI Tool Content (Legal basis: Contract performance, Consent)
  • - Content provided to our AI tools
  • - Generated outputs and interactions
• Technical Data (Legal basis: Legitimate interests)
  • - IP address
  • - Browser type and version
  • - Device information

3. Data Retention Periods

We retain different types of data for specific periods:

• User accounts and profile data: While account is active + 30 days after deletion
• Usage data and logs: 90 days
• Payment information: 7 years (required for tax purposes)
• AI training data: 12 months from last use
• Communication records: 2 years
• Marketing preferences: Until user opts out or requests deletion

4. Data Processors and International Transfers

We use the following third-party data processors:

• Vercel (Hosting provider) - United States
• Supabase (Database and authentication) - United States
• Resend (Email service provider) - United States
• Stripe (Payment processing) - United States

Some of our processors operate in the United States. When transferring your data outside the EU, we ensure appropriate safeguards are in place through Standard Contractual Clauses and adequacy decisions.

5. Your Rights Under GDPR

Under GDPR, you have the following rights:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

To exercise these rights, please email us at legal@ramilabs.com. We will respond to your request within 30 days.

6. Security Measures

At Rami Labs, we implement comprehensive technical, administrative, and physical safeguards to protect your personal information. Our security measures include:

• Industry-standard encryption protocols for data in transit and at rest
• Regular security assessments and penetration testing
• Strict access controls and authentication mechanisms
• Continuous monitoring and threat detection
• Regular security training for our team
• Secure backup procedures and disaster recovery plans

We regularly review and update our security practices to maintain the safety and integrity of your data in accordance with industry standards and regulatory requirements. While we maintain these defensive measures, we also depend on you to use your account responsibly. We recommend using strong passwords, enabling two-factor authentication when available, and never sharing your account credentials.

7. AI Training and Data Usage

Content provided to our AI tools may be used to train and improve our models. If you use tools that process personal data or journals, this data is used only for providing the service to you unless you explicitly opt in to allow us to use it for training.

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience. We use:

• Essential Cookies (Legal basis: Legitimate interests)
  Required for the website to function. These cannot be disabled.
• Analytics Cookies (Legal basis: Consent)
  Help us understand how visitors interact with our website.
• Functional Cookies (Legal basis: Consent)
  Remember your preferences and settings.

You can manage your cookie preferences through your browser settings. For detailed information about the cookies we use, please visit our Cookie Policy page.

9. Children's Privacy

Our services are not intended for users under the age of 16. We do not knowingly collect or process personal data from children under 16 without parental consent. If we become aware that we have collected personal data from a child under 16 without appropriate parental consent, we will take steps to delete that information.

10. Automated Decision Making

We may use automated decision-making or profiling in the following cases:

• Fraud prevention and security monitoring
• Service personalization and recommendations
• Content moderation in our AI tools

You have the right not to be subject to a decision based solely on automated processing if it significantly affects you. You can contact us to request human intervention, express your point of view, or contest any automated decision.

11. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Significant changes will be communicated directly to users via email.

12. Complaints

If you have concerns about our handling of your personal data, you have the right to lodge a complaint with your local data protection authority. For the Netherlands, this is the Autoriteit Persoonsgegevens.

13. Contact Us

For any questions about this Privacy Policy or our data practices, please contact us at legal@ramilabs.com.