隐私政策
Rimmo（“我们”）提供一款以本地运行为主的量化 AI Agent。这份政策说明我们处理哪些数据、为什么处理，以及你如何控制它们。我们把“不必要就不收集”当作默认。
1. 我们收集的数据
- 账户信息：邮箱地址、登录验证记录、订阅状态。用于登录、发放权益与账单通知。
- 检索请求：你向服务端知识库提交的问题文本、检索参数、返回的结果标识与耗时。用于返回结果、限额计量与故障排查。
- 支付信息：由支付服务商处理。我们不保存完整卡号；仅保留订阅状态与交易编号。
- 基础运行日志：请求时间、IP 地址、客户端版本、错误码。用于安全与稳定性。
2. 我们不收集的数据
- 对话历史：与模型的完整对话留在你的设备上，不上传。
- 本地文件与知识库文件：你导入的笔记、表格、代码，不离开本机。
- 模型凭据：你自带的模型 API key 由你与本机管理，我们不接收。
3. 处理目的与法律依据
我们仅为提供服务而处理上述数据：履行订阅合同、保障服务安全、排查故障、遵守法律义务。我们不将你的检索内容用于训练模型，也不出售数据。
4. 第三方
- 支付：订阅与账单由支付服务商处理，其隐私政策同时适用。
- 基础设施：服务器位于香港，由云服务商托管。
- 模型服务：Pro 的结论蒸馏由我们选定的模型服务完成；发送内容限于知识库片段，不包含你的对话历史。
5. 保留与删除
账户数据在账户存续期间保留；检索日志默认保留 90 天，用于安全与计量。你可以发邮件要求导出或删除账户数据，我们会在 30 天内处理。删除账户后，订阅状态与账单记录按税务要求保留必要期限。
6. 你的权利
你可以请求访问、更正、导出或删除你的个人数据，也可以撤回同意。请发送邮件至 hello@rimmo.ai。
7. 安全
传输使用 TLS；服务端数据库不对外开放，仅本地回环访问；访问凭据按最小权限管理。没有任何系统绝对安全，我们会在发现影响用户的事件后及时告知。
8. 变更
政策更新时我们会修改本页日期；重大变更会在站内或邮件通知。
9. 联系
隐私相关事宜：hello@rimmo.ai
Privacy Policy
Rimmo ("we") builds a quant AI agent that runs primarily on your machine. This policy explains what we process, why, and how you control it. We treat "collect only what is necessary" as the default.
1. What we collect
- Account data: email address, sign-in verification records, subscription status — used for access, entitlements and billing notices.
- Lookup requests: the question text you submit to the server-side knowledge base, retrieval parameters, returned result identifiers and latency — used to answer, meter quota and debug.
- Payment data: handled by our payment provider. We do not store full card numbers; only subscription state and transaction IDs.
- Basic operational logs: request time, IP address, client version, error codes — for security and reliability.
2. What we do not collect
- Conversation history: full conversations with the model stay on your device.
- Local and knowledge files: notes, spreadsheets and code you import never leave your machine.
- Model credentials: your own model API keys are managed by you and your machine; we never receive them.
3. Purpose and legal basis
We process the data above only to provide the service: performing the subscription contract, securing the service, diagnosing faults, and meeting legal obligations. We do not train models on your lookups and we do not sell data.
4. Third parties
- Payments: subscriptions and invoices are handled by a payment provider, whose privacy policy also applies.
- Infrastructure: servers are hosted in Hong Kong by a cloud provider.
- Model services: Pro distillation runs on a model service we select; only knowledge-base passages are sent, never your conversation history.
5. Retention and deletion
Account data is retained while your account exists; lookup logs are kept for 90 days by default for security and metering. You may request an export or deletion by email; we act within 30 days. After deletion, subscription and billing records are kept only as long as tax rules require.
6. Your rights
You may request access, correction, export or deletion of your personal data, and withdraw consent. Write to hello@rimmo.ai.
7. Security
TLS in transit; the server database is not exposed publicly and is reachable only over loopback; credentials follow least privilege. No system is perfectly secure; we will notify users promptly if an incident affects them.
8. Changes
We update the date on this page when the policy changes; material changes are announced in-product or by email.
9. Contact
Privacy enquiries: hello@rimmo.ai