Privacy Policy

Who we are

Effective date: [EFFECTIVE DATE]

This policy explains how [COMPANY LEGAL NAME], [REGISTERED ADDRESS] (“Rimefox”, “we”) handles personal data when you visit rimefox.com or use the Rimefox dashboard, editor and Rimefox AI. For questions about your data write to [DATA PROTECTION CONTACT].

Websites and stores built with Rimefox belong to their owners. When you visit or buy from such a website, its owner decides how your data is used; see “Data of merchants’ shoppers and visitors” below.

Data we collect

• Account: your name, e-mail address and password. Passwords are stored only as a one-way hash; two-step verification secrets are stored encrypted.
• Workspace and team: your websites, team members, their roles and invitations, and a workspace activity log.
• Your content: pages, texts, images, videos, files, forms, products and other data you add to your websites.
• Billing: your plan, subscription and invoices. You enter payment details in our payment processor’s checkout, not on Rimefox pages.
• Rimefox AI: your requests, the photos you attach and the conversation with Rimefox AI, plus a record of AI usage.
• Support: your support tickets, messages and attachments.
• Security: your signed-in sessions with a coarse device label, and a sign-in history: every sign-in and every failed attempt with its time, IP address, country (from Cloudflare), browser identifier and method, kept for 365 days. The IP address and country are also recorded with every action in your workspace’s activity log. You see your own sign-in history in Account → Security, workspace owners see the activity log, and Rimefox administrators see both, to protect accounts and investigate abuse. IP addresses are also used to limit repeated sign-in and similar attempts.

Why we use it

• to create and run your account and websites, and to host and publish them;
• to sign you in and protect your account;
• to bill your plan through our payment processor;
• to run Rimefox AI when you ask it to;
• to answer support requests;
• to send account e-mails, such as e-mail verification, password reset links and security notices after a password or two-step verification change.

[CONFIRM: LEGAL BASIS FOR EACH PURPOSE (CONTRACT, LEGAL OBLIGATION, LEGITIMATE INTEREST)]

[CONFIRM: WHETHER RIMEFOX SENDS MARKETING E-MAILS TO CUSTOMERS, AND HOW TO OPT OUT]

Rimefox AI

When you use Rimefox AI, your request, the relevant content of your website and copies of the photos you attach are sent to third-party AI processing services so they can produce the result. Rimefox AI works only on your website’s draft through a fixed set of checked tools; it cannot reach payments, orders, customers or publishing.

Conversation messages are kept with your website for up to 90 days and are deleted with the website’s purge. They contain what you typed, references to attached images and what Rimefox AI showed you. Run records and audit events contain no text of your requests.

[CONFIRM: THE AI PROCESSING SERVICES USED, WHERE THEY PROCESS DATA, THEIR CONTRACTUAL TERMS AND WHETHER THEY MAY RETAIN OR TRAIN ON THE DATA]

The contact form and the assistant on rimefox.com

Contact form: when you write to us through the form on rimefox.com, we receive your name, your e-mail address, the topic you choose and your message. We use them only to answer you. The message is delivered to our team by e-mail and kept in our database for 30 days, so that a failed delivery can be retried, then deleted. Your IP address is used only to limit repeated submissions; it is not stored with your message. The form does not create an account.

Assistant: the Rimefox AI assistant on rimefox.com answers questions about Rimefox from the content of our public website. It has no access to any account or website. Your question and the answer are sent to third-party AI processing services to produce the answer, and kept as an anonymous transcript for 14 days to check the quality of answers and prevent abuse, then deleted. No IP address, account or cookie is stored with the transcript, and the conversation is not kept in your browser. Please do not enter personal information in the assistant.

Cookies and browser storage

On rimefox.com we use no advertising or analytics cookies. [CONFIRM: NO ANALYTICS ON RIMEFOX.COM AT PUBLICATION]

• rimefox-theme: a cookie set only when you choose the light or dark theme, kept for one year and shared by the Rimefox apps so they remember your choice.
• Browser local storage remembers that you dismissed the offer to show a page in another language.
• Browser session storage is used once to reload a page after a site update.

When you sign in to the dashboard we use a necessary session cookie (__Host-rimefox_session, up to 7 days) and, during two-step sign-in, a challenge cookie that lasts 10 minutes.

Traffic and analytics on websites built with Rimefox

Every website hosted on Rimefox has a traffic report recorded by our servers, with no cookie and no script: for each request, the time, the visitor’s IP address, the country reported by Cloudflare, the page address, the referring website, the response status and size, and the browser or bot name derived from the browser identifier (the full identifier is not kept). It is used for security (for example to block abusive addresses) and for the website owner’s statistics, never for advertising, and it is not shared with third parties. Raw records, IP addresses included, are kept for 90 days; daily totals for 25 months. Only the website’s owners and administrators, and Rimefox administrators, see IP addresses.

A website owner can also turn on detailed analytics, off by default, in a privacy mode without cookies or in a consent mode that asks visitors first. It never stores cookies, full referrer addresses, query strings or form values, and counts visitors with a daily key whose secret is deleted within 48 hours. In consent mode a necessary preference cookie lasts 180 days, and the record of the visitor’s choice is kept for 730 days.

Data of merchants’ shoppers and visitors

The owner of each website or store is the controller of the data of its visitors, shoppers and customers. Rimefox processes that data on the owner’s behalf, only to provide the service. We do not use merchants’ analytics data for our own purposes, except aggregated, non-identifying platform totals.

If you bought from or contacted a store built with Rimefox, contact that store about your data. Store owners have tools to export everything stored about a customer’s e-mail address and to erase it across their websites. Contact forms do not store visitors’ IP addresses. The website’s traffic report, which includes visitors’ IP addresses and countries, is visible to the website’s owners and administrators.

Where your data is stored

• Published websites and our encrypted backups: Cloudflare R2, in the EU jurisdiction.
• Files you upload: a private Backblaze B2 bucket in the EU Central region, encrypted at rest.
• Account, website and store data: our database, replicated across our servers. [CONFIRM: SERVER LOCATIONS AND HOSTING PROVIDER]

All public traffic to Rimefox and to published websites passes through Cloudflare.

Service providers

We share data only with providers that help us run the service:

• Cloudflare (network and storage) and Backblaze (file storage);
• Paddle or Freemius, our payment processors for plans;
• a transactional e-mail delivery service for account e-mails [CONFIRM: PROVIDER NAME];
• OpenSRS, for business email mailboxes you add;
• third-party AI processing services for Rimefox AI [CONFIRM: PROVIDERS AND LOCATIONS].

[CONFIRM: COMPLETE SUB-PROCESSOR LIST AND SAFEGUARDS FOR ANY TRANSFER OUTSIDE THE EU/EEA]

Security

Connections are encrypted with HTTPS. Passwords are hashed with Argon2id, and two-step verification is available for every user. Uploaded images are checked and re-encoded before they are stored. Database backups are encrypted before they leave our servers, and uploaded files are stored encrypted at rest. Secrets are kept out of the database and never sent to browsers.

Only the members of a workspace can see its data, according to their role. Every read and action of our platform administrators in the admin console is recorded.

How long we keep data

• Account data: as long as your account exists.
• Deleted websites: restorable for 30 days, then purged. Orders and related financial records are kept for accounting. [CONFIRM: ACCOUNTING RETENTION PERIOD]
• Rimefox AI conversations: up to 90 days; the record of AI usage is kept as billing evidence.
• Database backups: 90 days. Deleted or replaced uploaded files: 30 days in storage history. Backup copies of uploaded files are not removed when the original is deleted. [CONFIRM: RETENTION OF BACKUP COPIES OF UPLOADED FILES]
• Analytics: as described above.

When an account is deleted, its users are deleted, or anonymized when a record we must keep still names them.

Your rights

Depending on where you live, you can ask to access, correct, export or delete your personal data, to restrict or object to its use, and to withdraw consent. Write to [DATA PROTECTION CONTACT]. You can also complain to a data protection authority. [CONFIRM: LEAD SUPERVISORY AUTHORITY]

You can export products, orders, customers, reports and contacts from your dashboard as CSV or Excel. To delete your whole account, write to us.

Changes to this policy

We will update this policy when our processing changes. The effective date at the top shows the current version. [CONFIRM: HOW CUSTOMERS ARE TOLD OF MATERIAL CHANGES]