Privacy policy
Last updated: 10 October 2026 · Español
This page explains what data Remite handles, why and with whom, whether you use the app or joined the waitlist.
Who is responsible
Owner: Mario Calvo Castillo
Tax ID (NIF): 31008034D
Address: Calle Alcántara 12, Córdoba (Spain)
Contact: mariocalvocst@gmail.com
What data we handle
- Your account: your email (you sign in with a link we send you, no password), your plan and your usage this month.
- What you create: your brands (name, website, colors, logo, tone), your campaigns with their brief and your conversation with the assistant, and the images you upload. They are saved to your account so they aren't lost and are available on any computer.
- Payments: if you buy a plan, your name, email, billing address, VAT ID if you give it, and your subscription status. Card details are handled by Stripe; Remite never sees them.
- Connection to your email platform: if you connect Klaviyo, Braze, Iterable, Salesforce or Brevo, its keys stay in your browser and only go through our server to make the request you ask for. To link variables, we read the names of your contact fields and one sample value of each, saved with your brand.
- Waitlist: your email and, if any, the campaign you came from (UTM).
- Product analytics: only if you accept it, PostHog records the pages you visit and the main service steps (start click, account created, email created, checkout started and plan purchased). Before sign-in it uses a random identifier; after sign-in it is linked to your account's internal identifier. We don't send PostHog your email, brief, generated content or brand website.
- X cookie: only if you accept it in the cookie notice, to know whether our ads on X bring people (without your email). You can change your choice under “Cookies” at the bottom of the site.
Why, and on what legal basis
- Providing the service, your account and your plan: performance of the contract (the terms of use).
- Charging and invoicing: performance of the contract and our legal obligations on tax and accounting.
- Emails about your account (sign-in link, purchase confirmation, service notices): performance of the contract.
- Waitlist, product analytics and X cookie: your consent, which you can withdraw at any time.
- Preventing abuse and keeping the service secure: our legitimate interest.
We don't sell your data or use it to train artificial intelligence models.
How long we keep it
Your account and what you create, while you have the account; if you ask us to delete it, it is deleted within 30 days. Invoices and related payment data, for as long as the law requires (up to 6 years). Waitlist data, until you unsubscribe or the list closes.
Who else handles it
Providers that serve us, under a data processing agreement:
- Supabase (Supabase Inc., USA): accounts and database, hosted in Frankfurt (EU).
- Stripe (Stripe Payments Europe Ltd., Ireland): payments, subscriptions and invoices.
- Anthropic (Anthropic PBC, USA): the artificial intelligence model that writes and edits the emails. It receives the brief, the brand details and the content of the campaign being edited.
- Firecrawl (Mendable Inc., USA): reads the public pages of your brand's website.
- Brevo (Sendinblue SAS, France): sends account and waitlist emails. Data stays in the EU.
- Vercel (Vercel Inc., USA): hosts the site and the app, and stores the images you upload.
- Unsplash (Unsplash Inc., USA): stock photos for blocks without an image. It receives nothing about you beyond the search.
- PostHog (PostHog Inc., USA): website and product analytics, using its EU hosting region and only with your consent.
- X (X Corp., USA, and its Irish subsidiary): only if you accept the cookie.
Transfers outside the European Union rely on the EU-US Data Privacy Framework where the provider is certified and, otherwise, on the European Commission's standard contractual clauses.
Your rights
You can ask for access, rectification, erasure, objection, restriction and portability of your data, or for your account to be deleted, by writing to the contact above. If you think we haven't handled it properly, you can complain to the Spanish Data Protection Agency (aepd.es).