Releem Privacy and Data Processing Policy

At Releem, Inc. ("Releem," "Company," "Us," "We," or "Our"), we are committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your Personal Information when you use our website, available at releem.com ("Site"), and our services ("Service"). The Service provides database monitoring and optimization services.

By accessing or using the Site or Service, you acknowledge that this Privacy Policy describes how Releem processes Personal Information. Your use of the Site and Service is governed by the Terms of Use. When Releem processes Customer Personal Data on behalf of a Customer, the Releem Data Processing Addendum governs that processing. Where consent is required, Releem requests it separately.

"Site" refers to the Company's website, accessible at releem.com. "Service" refers to the Company's services accessed via the Site, where users can monitor and tune the configuration of database servers.

"You" or "Customer" refers to you, as an authorized user of our Site or our Service, typically an employee or representative of an organization that subscribes to Releem's services.

“Personal Information” means information relating to an identified or identifiable individual. It includes account, contact, authentication, billing, support, website, device, IP-address, and cookie-identifier information.

“Customer Data” has the meaning given in the Terms of Use. Ownership of Customer Data is governed by the Terms of Use. Nothing in this Privacy Policy transfers ownership of Customer Data or gives Releem additional rights to use it.

“Customer Personal Data” means Personal Information contained in Customer Data or otherwise processed by Releem on behalf of a Customer. Customer Personal Data may include Personal Information incidentally contained in SQL queries, schema or object names, logs, errors, diagnostic information, or support materials.

Releem acts as a controller when it processes Personal Information for its own account administration, authentication, billing, website, security, support, and business-communication purposes. Releem acts as a processor or subprocessor when it processes Customer Personal Data on behalf of a Customer. The Releem Data Processing Addendum governs that processing.

“Anonymous Information” means information that cannot reasonably identify or be linked to an individual, Customer, database, system, or workload. Pseudonymized information and Customer Data are not Anonymous Information.

We collect both "Anonymous Information" and "Personal Information."

To activate and use the Service, we track information provided by your browser or by our software application when you view or use the Service. This includes:

• The website you came from (referring URL).
• The type of browser you use.
• The device from which you connected to the Service.
• The time and date of access.
• Your IP address (collected to screen for potential risk and fraud, and to improve/optimize the Site or Service).
• Other usage data that does not personally identify you.

We track this information using cookies and similar tracking technologies to track the activity on our Website or Service Platform, which are small text files including an anonymous unique identifier. Cookies are sent to your browser from our servers and stored on your computer's hard drive. They enable us to collect Anonymous Information and record your preferences, both individually and in aggregate. We may use both persistent and session cookies; persistent cookies remain on your computer after you close your session until you delete them, while session cookies expire when you close your browser.

To become a subscriber to the Service, you will need to create a personal profile. This involves registering with the Service and entering your email address, name, and creating a username and password. By registering, you authorize us to collect, store, and use this Personal Information in accordance with this Privacy Policy.

The Service also processes technical information relating to Customer database systems, including database metrics, configuration information, schema and object metadata, SQL queries or digests, execution plans, logs, errors, and diagnostic information. Some of this information may constitute Customer Personal Data. Releem processes Customer Personal Data as described in the Data Processing Addendum and the Customer’s documented instructions. Releem does not intentionally collect database table rows as telemetry.

Our Site and Service are not directed to anyone under the age of 13. We do not knowingly collect or solicit information from anyone under the age of 13, nor do we allow anyone under the age of 13 to sign up for the Service. If we learn that we have gathered personal information from anyone under the age of 13 without parental or guardian consent, we will delete that information as soon as possible. If you believe we have collected such information, please contact us at hello@releem.com.

We do not sell, trade, rent, or otherwise share your Personal Information for marketing purposes with third parties without your explicit consent, nor do we intend to do so.

Releem shares controller-side Personal Information with service providers that support Releem’s account administration, communications, billing, website, security, and business operations. These providers may process Personal Information only for the applicable services and subject to appropriate contractual obligations.

When Releem processes Customer Personal Data on behalf of a Customer, Releem uses the DPA Subprocessors identified in Section 4. Their processing is governed by the Releem Data Processing Addendum.

In general, the Personal Information you provide to us is used to help us communicate with you. For example, we use Personal Information to:

• Respond to your questions and solicit feedback.
• Provide technical support.
• Inform you about promotional offers related to our services.
• Provide notices about your account and/or subscription, including expiration and renewal notices.
• Carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
• Manage authentication, authorization, and user access control within the Releem platform.

We may share Personal Information with outside parties if we have a good-faith belief that access, use, preservation, or disclosure of the information is reasonably necessary to:

• Meet any applicable legal process or enforceable governmental request.
• Enforce applicable Terms of Service, including investigation of potential violations.
• Address fraud, security, or technical concerns.
• Protect against harm to the rights, property, or safety of our users or the public as required or permitted by law.

Releem may use Anonymous Information for website analytics and aggregate reporting. This section does not apply to Customer Data, Customer Personal Data, Customer Confidential Information, or pseudonymized information. Releem’s rights and restrictions concerning Customer Data are governed by the Terms of Use and Data Processing Addendum. Releem will not attempt to re-identify Anonymous Information.

For Personal Information that Releem processes as a controller, Releem relies on one or more of the following legal bases where applicable:
• Performance of a contract, including providing accounts, subscriptions, support, billing, and requested Services.
• Releem’s legitimate interests in operating, securing, supporting, and improving the Site and Service, preventing fraud, and communicating about the Service where permitted by law.
• Compliance with legal obligations.
• Consent, where applicable law requires it.

Where Releem processes Customer Personal Data as a processor or subprocessor, the Customer determines the applicable legal basis and the Data Processing Addendum governs Releem’s processing.

Releem uses the following providers:
Amazon Web Services: cloud hosting and infrastructure;
Google Cloud Platform: hosting and infrastructure, including Gemini processing
Crisp IM: customer support services.
PostHog: product analytics.
OpenAI: AI processing through the OpenAI API.
Paddle: payments, subscriptions, billing, and related analytics.

These Subprocessors are generally authorized under the Releem Data Processing Addendum. Releem will notify affected Customers in writing at least 30 days before a new or replacement Subprocessor begins processing Customer Personal Data and will give them an opportunity to object on reasonable data-protection grounds. Updating this Privacy Policy alone does not constitute that notice.

Releem also uses the following service providers for its own website, billing, account-administration, and business purposes. They are not DPA Subprocessors unless they process Customer Personal Data on a Customer’s behalf:
Plausible: anonymous website traffic analytics.

Customer Personal Data may be processed and stored in the European Union, Switzerland, and the United States.

Authorized Subprocessors may also process data in other countries where they or their subprocessors operate, as described in the provider information linked above.

Where required, Releem uses an adequacy decision, the European Commission’s Standard Contractual Clauses, or another valid transfer mechanism for restricted transfers.

We implement security measures designed to protect your information from unauthorized access.

• Account Protection: Your account is protected by your account password, and we urge you to take steps to keep your personal information safe by not disclosing your password and by logging out of your account after each use.
• Technological Security Measures: We protect your information from potential security breaches by implementing certain technological security measures including encryption, firewalls, and secure socket layer (SSL) technology.
• Data Encryption: The data is encrypted both during storage and during transmission.
• Access Controls: Role-based access control is enforced, restricting access to your Personal Information solely to personnel who need it to perform their duties in accordance with our agreement.
• Cloud Infrastructure Security: We leverage the robust security measures provided by our cloud infrastructure providers (AWS and GCP), including physical security of data centers, network controls, and monitoring.
• Backup and Recovery: Automated daily cloud backups and recovery processes for covered production data stores.
• Incident Detection and Response: Monitoring and internal alerting in place to detect data breaches across our data stores. Releem will notify affected Customers without undue delay after becoming aware of a personal data breach affecting Customer Personal Data, as described in the Data Processing Addendum.
• Ongoing Security: We conduct internal reviews and maintain continuous security monitoring through cloud provider tools and internal processes to regularly test, assess, and evaluate our organizational and technical security measures.

However, these measures do not guarantee that your information will not be accessed, disclosed, altered, or destroyed by a breach of such firewalls and secure server software. No method of transmission or storage is completely secure, but Releem maintains safeguards designed to protect Personal Information against unauthorized access, disclosure, alteration, and destruction.

We support the data-protection rights available to individuals under applicable law. To exercise a right, contact hello@releem.com.

Where the GDPR applies to Releem’s processing of your Personal Information, you have the following rights, subject to applicable conditions and exceptions. We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Information. These rights include:

• The right to access: To be informed about and request access to your Personal Information we process.
• The right to rectification: To request that we amend or update your Personal Information if it is inaccurate or incomplete.
• The right to erasure ("right to be forgotten"): To request that we delete your Personal Information.
• The right to restrict processing: To request that we temporarily or permanently stop processing all or some of your Personal Information.
• The right to object to processing: To object to us processing your Personal Information.
• The right to data portability: To request a copy of your Personal Information in electronic format and to transmit that Personal Information for use in another party’s service.
• The right to withdraw consent: Where we rely on your consent to process your Personal Information, you have the right to withdraw that consent at any time.

Please note that we may ask you to verify your identity before responding to such requests. We may not be able to provide the Service without some necessary data. You also have the right to complain to a Data Protection Authority about our collection and use of your Personal Information. For more information, please contact your local data protection authority in the EEA.

If you are a California resident, you are entitled to learn what data we collect about you, ask to delete your data, and not to sell or share it.

• Right to Know: You can request to know the categories and specific pieces of Personal Information we have collected about you, the categories of sources from which it was collected, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You can request that we delete the Personal Information we hold about you. In some cases, deletion may be accomplished through de-identification. If you choose to delete your Personal Information, you may not be able to use certain functions that require it.
• Right to Opt-Out of Sale/Sharing: We do not sell or rent your Personal Information to any third parties for any purpose.

Where required by applicable law, Releem honors legally recognized opt-out preference signals, such as the Global Privacy Control. You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser.
To exercise any of these data protection rights, please contact us at hello@releem.com.

Releem retains Personal Information that it processes as a controller only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the Service, administering accounts, complying with legal obligations, resolving disputes, and enforcing agreements.

Customer Personal Data is retained and deleted in accordance with the Data Processing Addendum. Following termination or a valid deletion request, Releem deletes Customer Personal Data from active systems within 30 days and protected backup copies within 35 days, unless applicable law requires longer retention.

The Company reserves the right to change this policy and our Terms of Service at any time. We will notify you of significant changes to our Privacy Policy by sending a notice to the primary email address specified in your account or by placing a prominent notice on our site. Significant changes will go into effect 30 days following such notification. Non-material changes or clarifications will take effect immediately. You should periodically check the Site and this privacy page for updates.

If you have any questions or concerns regarding this Privacy Policy or our privacy practices, please contact us by sending an email to hello@releem.com or by mail at: Releem, Inc., 500 Westover Drive #11329 Sanford, NC 27330 USA

Last Updated: August 1, 2026