Privacy Policy

Welcome to remell ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you understand how your personal data is collected, used, and safeguarded when you use our AI-powered website redesign platform at remell.app (the "Service").

This Privacy Policy applies to all users of our Service, including visitors to our website, registered account holders, and anyone who interacts with our platform. By accessing or using our Service, you acknowledge that you have read and understood this Privacy Policy.

Account Information

When you create an account through Google OAuth, we collect:

• Email address
• Display name
• Profile photo URL

Service Usage Data

When you use our redesign features, we collect:

• Website URLs you submit for redesign
• Text prompts and instructions you provide
• Screenshots or images you upload
• Generated design files and code outputs
• Conversation history with our AI system
• Project creation, modification, and version history

Payment Information

Payment processing is handled by Stripe. We do not store your full credit card number or payment credentials. We receive from Stripe:

• Subscription plan and status
• Billing cycle dates
• Credit usage and balance
• Transaction history

Technical Data

We automatically collect:

• IP address
• Browser type and version
• Device information
• Operating system
• Pages visited and actions taken
• Referring URLs
• Session duration and timestamps

We use your information to:

• Provide the Service — process your redesign requests, generate outputs, and deliver results
• Manage your account — authenticate your identity, maintain your projects, and manage subscriptions
• Process payments — handle billing, credits, and subscription management through Stripe
• Improve the Service — analyze usage patterns to enhance performance, fix bugs, and develop new features
• Communicate with you — send service-related notifications, respond to support requests, and provide updates
• Ensure security — detect and prevent fraud, abuse, and unauthorized access
• Comply with legal obligations — fulfill regulatory requirements and respond to lawful requests

We integrate with the following third-party services, each with their own privacy policies:

• Google OAuth — for user authentication. Google's privacy policy applies to data collected during the authentication process.
• Stripe — for payment processing. Stripe handles all payment card data in compliance with PCI DSS standards.
• Cloudinary — for media hosting and delivery.
• Dicebear — for generating default user avatars.

We may also use analytics services to understand how users interact with our platform. These services may collect data about your usage through cookies and similar technologies.

How Your Input Is Processed

When you submit a URL or prompt, our AI system analyzes the target website's structure, content, and design to generate a redesigned version. Your inputs (URLs, prompts, uploaded images) are processed to deliver the requested output.

Data Usage for AI Improvement

We may use anonymized and aggregated usage data to improve our AI models and service quality. We do not use your specific project outputs, proprietary content, or personally identifiable inputs to train our models without your explicit consent.

Output Ownership

The generated designs and code outputs produced by our Service are owned by you, subject to the terms outlined in our Terms of Service. Please refer to our Terms of Service for detailed information about intellectual property rights.

We use the following types of cookies:

• Essential cookies — required for authentication and core functionality (session management, login state).
• Functional cookies — remember your preferences and settings to enhance your experience.
• Analytics cookies — help us understand how visitors use our platform so we can improve it.

We also use browser local storage and session storage to temporarily store data such as pending actions and uploaded images during your session.

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent you from using certain features of our Service.

We implement industry-standard security measures to protect your data, including:

• HTTPS encryption for all data in transit
• Encrypted storage for sensitive data at rest
• Regular security audits and monitoring
• Access controls limiting data access to authorized personnel

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

Data Retention

We retain your account data and project files for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing agreements).

Depending on your location, you may have the following rights:

For All Users

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your account and associated data
• Data portability — request your data in a machine-readable format
• Opt-out — unsubscribe from marketing communications at any time

For EEA/UK Users (GDPR)

If you are located in the European Economic Area or the United Kingdom, you additionally have the right to restrict processing, object to processing, and lodge a complaint with your local data protection authority. Our legal basis for processing your data includes performance of a contract, legitimate interests, and your consent where applicable.

For California Users (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, request deletion, and opt out of the sale or sharing of personal information. We do not sell your personal information to third parties.

To exercise any of these rights, please contact us at the email address listed below.

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses and other legally recognized transfer mechanisms where required.

Our Service is not intended for users under the age of 13. We do not knowingly collect personal data from children under 13. If we learn that we have collected data from a child under 13, we will take steps to delete it promptly. If you believe a child has provided us with personal information, please contact us immediately.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting a notice on our website or sending you an email. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

• Email: contact@remell.studio
• Website: remell.studio

We will respond to your request within 30 days, or sooner where required by applicable law.