Privacy Policy

When you create an account and run an assessment, we store:

• Your email address — to identify your account and sign you in. Authentication is handled by Supabase Auth.
• Your name, if you give us one at signup.
• The company URL you submit, and the domain we derive from it.
• The assessment we generate — scores, detected technologies, business details read from public sources, and the written report.
• Your answers to the assessment questions (team size, revenue band, goals, where your team loses time, tools you use).

We do not collect payment details through this product, and we do not use advertising or cross-site tracking cookies.

An assessment reads publicly available information about the company whose URL you submit: its website, DNS records, certificate transparency logs, domain registration records, and public business listings. We only read what is openly published. We do not attempt to access private systems, and we respect robots.txt when deciding what to fetch.

If you believe we hold information about your company that should not be published, email hello@remap.ai and we will remove it.

If you run an assessment without an account, the result is kept in your own browser’s local storage and is not sent to our database. It only reaches us if you then create an account, at which point it is attached to that account. Clearing your browser data removes it.

Data is stored in Postgres, hosted by Supabase. Access is enforced at the database level with row-level security: every row is scoped to the account that owns it, so one customer cannot read another’s assessments.

Some parts of an assessment are generated by sending the public text of the assessed company’s website, and your questionnaire answers, to a third-party language-model provider. Your email address and account details are never sent to that provider.

We keep your account and assessments until you ask us to delete them. Deleting your account removes your profile and every assessment attached to it.

Under the Australian Privacy Act you can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Email hello@remap.ai and we will respond within 30 days.

If you are in the EU or UK, you have equivalent rights under the GDPR, including the right to object to processing and to lodge a complaint with your local supervisory authority.

If a breach occurs that is likely to result in serious harm, we will notify affected users and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.