Privacy Policy

1. Our role

For account, website and billing-related data about our own customers and visitors, we act as the data controller.

For the data you upload to or sync into Reimber about your own customers (for example contacts, invoices and payments), we act as a processor on your behalf and follow your instructions. You are responsible for having a valid legal basis to process that data.

2. Data we collect

• Account data: name, email address, company name, role and the settings you choose.
• Customer Data: the customers, contacts, invoices, payments, notes and documents you import, sync or create in Reimber.
• Usage data: log-in events, actions taken in the application, device and browser information and IP address, used for security and to improve the product.
• Website data: pages visited and basic analytics. See our Cookie Policy.
• Communications: messages you send us by email or through our forms.

3. Payments

Payments are processed by Paddle.com, our reseller and Merchant of Record. Paddle collects your payment and billing details directly and processes them under its own privacy policy. Reimber does not receive or store your full card details. We receive from Paddle the information needed to manage your subscription, such as your plan, billing status and invoices.

4. How we use data

• Provide, secure and support the Services.
• Manage your account, trial and subscription.
• Send service emails, such as security alerts, trial and billing notices.
• Send product news and tips, which you can unsubscribe from at any time.
• Understand how the product is used so we can improve it.
• Prevent fraud and abuse, and meet legal obligations.

5. Service providers

We do not sell personal data. We share it only with service providers that help us run Reimber, under contracts that require them to protect it:

• Microsoft Azure: hosting, database, file storage and secret management.
• Paddle: checkout, payments, taxes and invoicing.
• Anthropic: AI features. Its commercial terms do not allow your data to be used to train its models.
• Sentry: error monitoring, with passwords, tokens and keys removed before any event is sent.
• Email delivery providers: to send the emails and reminders you configure.
• Vercel: hosting of this website.

6. International transfers

We are based in Costa Rica and our service providers may process data in the United States and other countries. When data is transferred across borders we rely on the safeguards our providers offer, such as standard contractual clauses where applicable.

7. Retention

We keep personal data while your account is active. If your account is closed, you can request an export for 30 days, after which we delete Customer Data. We may keep limited records longer when the law requires it, for example for tax and accounting purposes.

8. Security

We protect data with encryption in transit (HTTPS), encryption of integration credentials with AES-256-GCM, Argon2 password hashing, role-based access control and activity logs. Learn more on our Security page. No system is completely secure, and we will notify affected customers of a personal data breach as required by law.

9. Your rights

Depending on where you live, including under Costa Rica’s Law 8968, the GDPR or the CCPA, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to opt out of marketing. To exercise them, email privacy@reimber.com. If your data was uploaded to Reimber by one of our customers, we will forward your request to that customer.

10. Children

The Services are for businesses and are not directed to children under 18.

11. Changes to this policy

We may update this Privacy Policy. We will post the new version here and update the date above, and we will notify account owners of material changes.

12. Contact

EMPBI S.A., cédula jurídica 3-101-851509, San José, Costa Rica. Email: privacy@reimber.com.