Legal
Website privacy
Draft — to be reviewed by a lawyer before launch. [Highlighted] = placeholder, dotted = not yet verified.
On this page
This page explains what personal data we process on remae.ai, why we need it, and what you can do about it.
It covers this website only. Pre-booking the Remae Band and joining the Remae Ring waitlist happen on pay.remae.ai, a separate site with its own terms and privacy notice. The Remae app has its own privacy policy: Remae app privacy policy.
- remae.ai has no forms, no accounts and no payments.
- To show € or $, we look only at the country your visit comes from. We don’t store it.
- No cookies, no ads, no selling of data. Ever.
- You can ask what we hold about you, and have it corrected or deleted, at any time. Just write to us.
Who is responsible
The controller under the GDPR is VxNeo Labs FlexCo, Wagramer Straße 81, Stiege 1, Top 203, 1220 Vienna, Austria.
Email: contact@vxneolabs.com. We have not appointed a data protection officer. Please send any privacy question to the same address.
When you visit this site
Our host, Vercel, receives the technical data every browser sends: your IP address, the date and time, the page you asked for, the page you came from, and your browser and device type.
We need this to deliver the site and to protect it against attacks and abuse. Vercel keeps these server logs for [up to 30 days, check the Vercel plan].
Legal basis: our legitimate interest in a working, secure website (Art. 6(1)(f) GDPR).
Visit counting
We use Vercel Web Analytics to count visits. It sets no cookies. It does not identify you. Instead, it uses a hash of your request, and that hash is thrown away after 24 hours.
We only see totals: pages viewed, the site visitors came from, and their country, region, operating system, browser and device type.
Legal basis: our legitimate interest in knowing which pages help people (Art. 6(1)(f) GDPR).
Showing € or $
Pre-booking the Band costs €10, or $10 in the US and Canada. To show the right amount, a page with a pre-book button asks our function /api/geo. Vercel works out the country from your IP address and passes only that country to the function. The function answers with € or $ and keeps nothing: we store neither your country nor your IP address. The request shows up in Vercel’s server logs like any other.
When you follow a pre-book or waitlist link, it tells pay.remae.ai your region (US and Canada, or everywhere else) and the language of the page, so that site shows the right currency and language. Nothing else about you goes with it.
Legal basis: our legitimate interest in showing you the price in your currency (Art. 6(1)(f) GDPR).
Pre-booking and the Ring waitlist
You can’t enter anything on remae.ai. Pre-booking the Band, paying for it, and leaving your email for the Ring waitlist all happen on pay.remae.ai. The data you give there, and the payment through Stripe, are covered by that site’s own terms and privacy notice, which you find there.
Fonts and code
Our fonts (Figtree and Nunito) and every code library this site uses, such as three.js, GSAP and Lenis, are served from remae.ai itself. Your browser does not connect to Google Fonts or to any other server for fonts or code.
When you write to us
If you email us, we use your address and your message to answer you. We delete it once the matter is closed, unless we must keep it.
Legal basis: Art. 6(1)(b) GDPR if it is about a pre-booking or an order, otherwise our legitimate interest in answering you (Art. 6(1)(f) GDPR).
How long we keep data
- Server logs: [up to 30 days, check the Vercel plan].
- Your country, for € or $: not stored by us.
- Visit counting: no personal data is stored. The request hash is discarded after 24 hours.
- Emails you send us: until the matter is closed, unless the law requires us to keep them longer.
Who helps us
For this site, this provider processes data for us, only on our instructions and under a data processing agreement (Art. 28 GDPR):
Vercel Inc.
Hosting, server logs, the country lookup that picks € or $, and visit counting (Web Analytics)
Covina, California, USA · EU-US Data Privacy Framework (Art. 45 GDPR) and Standard Contractual Clauses in Vercel’s DPA. Our functions run in Frankfurt.
We share data with authorities only when the law requires it. We never sell your data.
Data outside the EU
Vercel is based in the USA and may access data from there. We only allow this with safeguards the GDPR accepts. The list above names them: the EU-US Data Privacy Framework (Art. 45 GDPR) and the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). Write to us for a copy.
Your rights
You have the right to:
- access the data we hold about you (Art. 15 GDPR),
- have it corrected (Art. 16),
- have it deleted (Art. 17),
- restrict how we use it (Art. 18),
- get it in a common, machine-readable format, to take elsewhere (Art. 20),
- object at any time to uses based on our legitimate interest (Art. 21).
Write to contact@vxneolabs.com. We answer within one month. It is free.
You can also complain to a data protection authority. In Austria that is the Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, dsb@dsb.gv.at, www.dsb.gv.at. You can also complain in the EU country where you live or work.
No automated decisions
We do not make decisions about you based only on automated processing, and we do not build profiles of you (Art. 22 GDPR).
Cookies
This site sets no cookies. That is why there is no cookie banner. What pay.remae.ai uses is explained in its own privacy notice.
Changes to this page
We update this page when the site or the law changes. The date at the top shows the current version.