Privacy Policy

1. Data Controller

The Rimest platform is responsible for the processing of personal data under this Privacy Policy. You may submit privacy-related requests to [email protected].

2. Data We Collect

The Platform collects only the data necessary for the operation of the service:

• Account information: Email address, encrypted password
• Transaction data: Payment amounts, Nano addresses, transaction dates, notes
• Account content: Account name, website URL, description, uploaded documents
• Technical data: IP address, session information (for security purposes)

3. Purposes of Processing

Collected data is used exclusively for the following purposes:

• Account creation, authentication, and session management
• Processing and tracking of payment transactions
• Email verification and security notifications
• Account review and approval management
• Maintaining platform security and preventing abuse
• Compliance with legal obligations

4. Legal Basis

Your personal data is processed on the basis of contractual necessity, legitimate interest, and consent, in accordance with applicable data protection law including the General Data Protection Regulation (GDPR) where applicable.

5. Data Security

Passwords are stored using strong cryptographic hashing and are never held in plain text. All communications are protected by TLS encryption. Access rights are limited to personnel required for service operation.

6. Sharing with Third Parties

Your personal data is never sold or shared with third parties for marketing purposes. Data may be shared only in the following limited circumstances:

• Email service provider (Resend): Your email address is used to deliver verification and notification emails
• Legal requirements: Where required by a valid legal obligation or court order

7. Cookies

The Platform uses only essential technical cookies for session management. No third-party advertising or tracking cookies are used.

8. Data Retention

Your account data is retained for as long as your account remains active. Following an account deletion request, your personal data will be deleted or anonymised within a reasonable period, subject to any applicable legal retention obligations.

9. Your Rights

Under applicable data protection law you have the following rights:

• Right to access your data and receive a copy
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten") under certain conditions
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent at any time

To exercise these rights, please contact us at [email protected].

10. Changes

This policy may be updated from time to time. Material changes will be communicated to your registered email address. Continued use of the Platform after any changes take effect constitutes acceptance of the updated policy.