This policy explains which personal data is processed when you use the RimestDB desktop app and the db.rimest.com website, why, and how.
Who we are
The data controller is Rimest. For anything related to this policy, contact us at [email protected].
What stays on your computer
Your database connections, passwords, SSH keys, queries, scripts and query results are stored only on your computer and are never sent to us. Saved passwords are encrypted with Windows data protection (DPAPI) and cannot be decrypted on another computer.
Information we process and why
- Account: your email address and a one-way hash of your password (the password itself is never stored). Used to create your account, sign you in and send verification and password reset codes.
- Device: an identifier and name the app creates for each computer you sign in on. Used to manage your sessions, bind the license to the device and give the free trial once per device.
- License and orders: your trial and subscription dates, the plan you bought, the amount and the payment provider's transaction ID. Used to provide your subscription, handle refund requests and keep records required by law.
- Acceptance of the terms: which version you accepted and when.
- Technical logs: short-lived server logs such as IP addresses. Kept for security and abuse prevention.
This data is collected electronically when you create an account, sign in or make a purchase. We process it to perform our contract with you, to meet legal obligations and, for security, on the basis of our legitimate interest. We do not use your data for advertising or marketing, and we never sell it.
Sharing and service providers
- Payments: Nano payments are taken through Rimest's payment service; details of the wallet you pay from are used only to confirm the transaction. Card payments are taken by our payment provider, Creem: your card details go only to Creem and never reach us; your email address, country and payment details are passed to Creem, which tells us the outcome of the payment (completed, amount, order ID). Creem also handles taxes and refunds, and acts as an independent controller under its own privacy policy.
- Email: verification and password reset codes are sent through Resend.
- Hosting and network: our servers and website are served through Cloudflare.
- Microsoft Store badge: the download page loads Microsoft's Store badge from Microsoft's servers; this request gives Microsoft browser details such as your IP address. No other page makes requests to Microsoft.
These providers may operate servers outside your country; your data is shared with them only as far as needed to provide the service. Apart from lawful requests by authorities, we do not share your data with third parties.
Cookies
This website does not use analytics or advertising cookies. The theme you choose is stored only in your browser. We set a single functional cookie (lang) to remember your language.
Retention
Account information is kept while your account is open. When we delete your account, its account and device data is deleted; order records are kept for the periods required by law. Technical logs are deleted after a short time.
Your rights
You can ask to access the data we hold about you, to correct or delete it, to restrict or object to its processing, or to receive it in a portable form. Write to [email protected] from the email address of your account; we reply within 30 days. If you live in the EU or the UK, you also have the rights given by the GDPR, including the right to complain to your data protection authority. Users in Türkiye have the rights in Article 11 of the Turkish Personal Data Protection Law (KVKK).
Changes
We may update this policy. We will announce significant changes on the website and, where appropriate, in the app or by email; the date at the top shows the latest update.