Remio procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ PIPEDA: For users in Canada, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA). ” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ GDPR: For users in the EU, we comply with the General Data Protection Regulation. ” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Adherence to Google API services security best practices Compliance Commitment We strictly comply with all requirements of the Google API Services User Data Policy, including but not limited to data minimization principles, transparency requirements, and security standards. ” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ In accordance with Google API Services User Data Policy requirements: ” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ All data access is subject to strict permission controls and auditing ” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ Data Portability: Users can export their data by contacting our support team. We will provide the user with a copy of their data in a commonly used format, such as JSON or CSV. This allows users to transfer their data to other services or keep it for their records. ” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ When you use the "Ask remio" feature, your questions and the AI-generated responses are temporarily stored to provide contextual information and improve the quality of the service. ” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ You can export all content you've created in remio Permission Update Notifications If we need to access additional types of Google user data, we will: ” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ You may choose to delete your remio account at any time using the account dashboard, which will permanently delete your account, licenses, and subscriptions. ” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ Anonymization: Before using any interaction data for analysis, we remove personally identifiable information to ensure anonymity. ” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ Usage Data: Algorithm usage logs are temporarily cached for operational and troubleshooting purposes. These logs are retained for a maximum of 30 days and then automatically deleted. ” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ We do not permanently store your Gmail email content on our servers ” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ Temporary Logs: Algorithm usage logs are temporarily cached for operational and troubleshooting purposes, retained for a maximum of 30 days, then automatically deleted. ” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ Email data is stored locally on your device only, or processed according to your sync settings ” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ Content: We do not store your content; all notes, highlights, and collections are processed locally on your device or through third-party services as needed. ” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ At the end of the Term, the Company shall have the right to delete all of Customer Content and Customer Data at any time and cancel your Account with us. You acknowledge and agree that archived versions of the Services may include archived copies of Customer Content and Customer Data which may be retained by us for an archive cycle. ” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ Data Retention: Interaction data is retained for a limited period to maintain context and improve service quality. Once it has fulfilled its intended purpose, it is securely deleted. ” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ Storage & Retention: We don’t retain user content; cached logs are purged after 30 days. ” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ Temporary logs generated from AI interactions are automatically deleted after a maximum of 30 days Access Controls ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Sharing : Never shared with third parties except anonymized AI processing Google OAuth Integration ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Legal Requirements: We reserve the right to disclose data if required by law. ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Third-Party Sharing: Minimal data (username, email) is shared only with trusted security services or legal authorities when legally required. ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We will seek user consent before sharing data with third parties for purposes outside the scope of this privacy policy. ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may share data with the following third parties: Content Moderation APIs: We use services such as Google SSO, apple SSO, OpenAI Content Moderation API, Gemini Content Moderation api to ensure content safety. ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ The Services are provided by us from data center facilities to which Users have remote access via the internet in conjunction with certain offline components provided by us under this Agreement. We may use third party service providers to provide limited parts of the Services from time to time, including data storage and processing, and you consent to us subcontracting these services to those third parties. We implement security procedures to help protect your data from security attacks. However, you understand that use of the Services necessarily involves transmission of your Customer Data over networks that are not owned, operated or controlled by us, and we are not responsible for any of your Customer Data lost, altered, intercepted, copied or stored across such networks. We cannot guarantee that our security procedures will be error-free, that transmissions of your Customer Data will always be secure or that unauthorized third parties will never be able to defeat our security measures or those of our third party service providers. If you become aware of any security breach in the Services, you agree to promptly notify us. All data at rest is encrypted and all data in transit is encrypted. ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ How It Works: We don’t store or process your content (notes, highlights, collections). Instead, we securely relay requests to established third-party large language model providers for AI functionality. ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We do not share your personal email data with other users or organizations ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We don't share your email with third parties, except payment processors (Stripe). ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We do not disclose your email content to law enforcement or government agencies unless legally required Third-Party Service Providers When using AI features, we may send encrypted, anonymized data fragments to trusted third-party AI service providers, but these providers: ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ All data processing is handled securely through third-party large language model providers, and we do not store user content (such as notes, highlights, or collections) on our servers. Minimal data is stored as follows: User Information: We only collect your username and email via Google SSO for account authentication. This information is retained as long as your account remains active. ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Temporary Processing : AI functionality requires data processing through third-party large language model providers, with data encrypted and anonymized during processing ” | Captured 2026-06-08Open source →Finding permalink → |
| Tier differences | All applicable tiers | low | “ BYOK (Bring Your Own Key): Allows users to use their own AI API Key, enabling use of remio's AI capabilities while maintaining full control over data privacy. Users of this plan pay only for remio features, not for AI token consumption. ” | Captured 2026-06-08Open source →Finding permalink → |
| Tier differences | All applicable tiers | low | “ Credit Packs: Pro users may have the future option to purchase supplemental "Credit Packs". Credits from these packs do not expire, but they require an active Pro subscription to be used. ” | Captured 2026-06-08Open source →Finding permalink → |
| Tier differences | All applicable tiers | low | “ remio offers several subscription plans, including Free, Pro, and BYOK (Bring Your Own Key). Free: Provides users with basic knowledge and resource management features, and includes a small, recurring monthly amount of AI Credits. ” | Captured 2026-06-08Open source →Finding permalink → |
| Tier differences | All applicable tiers | low | “ Pro: Designed for professionals who rely heavily on AI-powered workflows, offering a larger quota of AI Credits and all premium features. ” | Captured 2026-06-08Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ AI Credits are the units used to measure and consume remio's advanced AI features (such as AI Chat, summaries, etc.). Provisioning and Expiry: Free and Pro plans will receive a fixed amount of Credits per subscription period (per month currently). In the current product phase, any unused Credits will expire at the end of the billing cycle and will not roll over to the next period. ” | Captured 2026-06-08Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.