Privacy Policy

1. Who we are

RAMIS (https://ramis.io) is a real-time news and market monitoring service operated by Yosi Rozenberg, an individual operator based in Israel, who acts as the data controller for the personal data described in this policy. Privacy questions and requests: support@ramis.io.

2. Data we collect

• Account data — your email address, your name when you sign in with Google, and a hashed password if you sign up with email. We never store plaintext passwords.
• Workspace content — the tracked terms you monitor, boards, notes, saved searches, and newsletter configurations you create. Tracked-term names can reveal what you or your organization are interested in, so we treat them as confidential customer data.
• Engagement events — in-app interactions such as feedback buttons, reads, and bookmarks, used to tune relevance scoring for your workspace.
• Newsletter click tracking — links in newsletters we send for you are wrapped in redirect URLs (/r/[token]) so that click counts can be reported to the newsletter’s owner.
• Telegram data — if you connect Telegram alerts, we store your Telegram chat ID and username.
• Notification logs — records of alerts and digests sent to you, retained for 180 days and then deleted automatically.
• Product usage data — information about how the Service is used: which features are opened and how often, feature configuration choices, performance measurements, and error/diagnostic reports. We use this to understand what works, fix what doesn’t, and decide what to build next.
• Server logs — standard technical logs (IP address, user agent, timestamps) generated when you use the Service.

We do not collect payment card details. Billing is handled by Paddle, our merchant of record (see the table below).

3. How we use data

We use the data above to provide the Service (monitoring, scoring, alerting, digests), to secure and troubleshoot it, to communicate with you about your account, and to comply with legal obligations. We also analyze product usage and engagement data — in aggregate or pseudonymized form wherever practicable — to improve the Service, develop new features, and tune quality (for example, improving relevance scoring or deciding which features to invest in). We do not sell personal data, and we do not use your data for third-party advertising.

4. AI processing — what we send to AI providers

RAMIS uses large language models for relevance scoring, summarization, and newsletter TL;DRs, routed through OpenRouter Inc. to underlying LLM providers. To be plain about what is sent: article text and titles from public news sources, the names of your tracked terms, and newsletter content are transmitted to these providers for scoring and summarization. The bulk of this material is third-party news text, not your personal data — but tracked-term names may reveal your interests, and we disclose that here deliberately. We do not send your email address, password, or Telegram identity to AI providers.

5. Sub-processors

We use the following service providers to operate RAMIS. Each processes data under its own data processing agreement with us:

6. International transfers

The controller is based in Israel, which holds a European Commission adequacy decision (reconfirmed in 2024) — this is the transfer basis for EU users’ data processed by the controller. Transfers to the sub-processors listed above rely on each processor’s data processing agreement and, where applicable, Standard Contractual Clauses.

7. Retention

• Notification logs: 180 days, then deleted automatically.
• Engagement events: retained for a limited period for scoring purposes, then deleted automatically.
• Articles and news content: retained while relevant to any active workspace.
• Account data and workspace content: until your account is deleted.

8. Your rights — access, export, deletion

You can request access to, correction of, export of, or deletion of your personal data by emailing support@ramis.io from your account email address. We fulfil requests within 30 days.

To be transparent: there is currently no self-serve export or deletion button in the product — these requests are handled manually by the operator. Deletion removes your account, workspace memberships, preferences, and engagement history; workspace content shared with other members may persist in workspaces they continue to own.

9. Security

Data is encrypted in transit (TLS) and protected at rest by database access controls and row-level security. Access to production systems is limited to the operator. No system is perfectly secure; we encourage a strong, unique password and keeping your email account protected.

10. Data breaches

If a personal data breach occurs that is likely to result in a risk to your rights, we will notify affected users and the competent supervisory authority without undue delay, in line with applicable law.

11. Cookies

RAMIS sets only strictly-necessary authentication cookies and runs no analytics or third-party scripts. Details are in the Cookie Policy.

12. Children

The Service is not directed at children, and people under 16 are not permitted to use it. If you believe a child has created an account, contact support@ramis.io and we will delete it.

13. Changes to this policy

We may update this policy from time to time. For material changes we will give notice by email or in the Service before the changes take effect. The “Last updated” date above always reflects the current version.

14. Contact

Privacy requests and questions: support@ramis.io.