RE0 / PRIVACY
Privacy Policy
This policy explains what RE0 collects, why, which providers process it, how long it is kept, and how you can see and delete your data.
Last updated: November 3, 2026
01What we collect
Account details: the email, display name, avatar, and account id Google or GitHub provide, plus the profile and language you set.
Your knowledge and conversations: files you upload, links and repositories you submit, text you paste, the extracted text and passages, and your questions and the answers.
Payment records: the transaction and subscription ids, amounts, currency, billing periods, and refund states Paddle reports back. We never receive or store card numbers.
Usage records: your credit ledger, processing records, and the service logs we need.
02Why we use it
To provide and improve the service, calculate and settle credits, process payments and refunds, prevent fraud and abuse, and meet legal obligations. We do not sell your personal information or use your knowledge to train models.
03Providers
Paddle (payments, tax, and invoices); Vercel (hosting and file storage); Neon (database); the model providers used for generation, embeddings, and audio transcription (through Vercel AI Gateway or an endpoint we configure; you are told before audio is sent for transcription); GitHub (private repositories, only after you authorize). Each processes data only as far as its service requires.
04Identity verification (KYC)
Purpose: only for the manual identity check before your first payout, to prevent impersonation and account takeover, and to meet legal and tax obligations around payments; for nothing else.
What we collect: legal name, country or region, document type (passport, national ID, or residence permit), the document number’s last four digits, the document’s expiry date, a photo of the document, and a selfie holding it.
Storage and access: the document photo and selfie are uploaded straight to private storage, never public or reachable by an ordinary link. Only authorized administrators can view them, through signed links that expire within 60 seconds, and every view is written to an audit log.
Retention and deletion: 30 days after approval the original document photo and selfie are deleted automatically, keeping only the document type, last four digits, expiry date, reviewer, and review time. For submissions that are rejected or sent back for re-verification, the originals are deleted within 30 days of the decision. The verification and payout records kept are retained while your account exists and for the accounting and tax periods the law requires, then deleted.
05Tax information
Before a payout you choose the tax form that applies — W-9 for US tax residents, W-8BEN for non-US persons — and declare that you have submitted it; we keep the form type and the time of the declaration. We may report payments to tax authorities where the law requires. You remain responsible for declaring your income under your local law.
06Retention
Your account, knowledge, and conversations are kept while your account exists. Knowledge and conversations moved to the trash are purged after 30 days. Payment, refund, and credit records are kept for the periods accounting and tax rules require. When you delete your account, everything else is deleted within 30 days.
08Your rights
You can view, correct, or export your profile, delete knowledge and conversations, or ask us to delete your account. Email legal@re0.io with privacy requests; we answer within 30 days. Please write from your account’s email so we can confirm it is you.
09Security and changes
Data is encrypted in transit and at rest; third-party credentials and authorization tokens are stored encrypted; the admin console requires a password and a one-time code, and administrators’ actions are audited. Changes to this policy are published on this page with a date; material changes are announced in the app beforehand.
Where the Chinese and another language version differ, the Chinese version prevails. These terms will be reviewed again before payouts open.