PRIVACY

Privacy Policy

Effective: 23 August 2026  ·  Last updated: 23 August 2026  ·  Version 2.0

1. Who we are

RemoGroup.ai LLC, doing business as BeInvestorReady (“BeInvestorReady,” “we,” “us”) of 2900 E Broadway Blvd, Suite 100, Tucson, AZ 85716, USA is the controller of personal information described in this policy. For privacy matters, contact remo@remogroup.ai.

This policy covers the BeInvestorReady desktop application, the beinvestorready.live website, and the licensed gateway service at api.beinvestorready.live (together, the “Services”).

2. What stays on your device

The application is local-first by design. The following are stored on your computer and are not transmitted to us:

• Your documents. Files and folders you add to a Knowledge Space are read from disk and indexed locally. Originals are never copied into the application, and the index is not uploaded.
• Rehearsal history. Interview questions, transcripts, grades, and scorecards persist in a local file under your user profile, partitioned by Knowledge Space. They never leave the device.
• Credentials. Provider keys and your activation credential are held in operating-system secure storage — DPAPI on Windows, Keychain on macOS — with no plaintext fallback.
• Screen captures. Frames captured for the live answer panel are held in memory for the duration of a request and are never written to disk.

3. What leaves your device, and why

Three categories of data leave your machine, each only for a stated purpose:

• Question and evidence data → your AI provider. When an answer is generated, or an interview question is written or graded, we send the question, the small set of retrieved excerpts needed to ground it, and — in rehearsal — your answer transcript. We do not send your whole corpus.
• Audio and text → your speech provider. When voice features are on, microphone audio streams to the transcription provider you configured, and question text is sent for the interviewer’s synthesized voice. Audio is not retained by us.
• Account and licensing data → us. Described in section 4.

In bring-your-own-keys mode, requests go from your machine directly to the provider you chose, using your credentials, and do not pass through our systems.

4. The licensed gateway

If you use a BeInvestorReady subscription rather than your own provider keys, your AI requests are routed through our gateway so that we, not you, hold the provider credentials. In that mode we necessarily process:

• Request content in transit. Your question and its evidence pass through the gateway to reach the provider. The gateway does not store, log, or inspect that content: its request logs record the HTTP method, path, and status code only.
• Licensing records. A one-way hash of your license key, your Stripe customer and subscription identifiers, an opaque per-machine installation identifier, and activation timestamps. The license key itself is stored only as a hash and cannot be recovered from our records.
• Usage counts. A daily request tally per license, used to enforce fair-use limits. It records how many requests were made, never what they contained.
• Standard network data. IP address and connection metadata, processed transiently by our hosting and network providers for security, abuse prevention, and delivery.

Payment card details are handled entirely by Stripe and never reach our systems. We receive from Stripe the billing contact details, subscription status, and transaction records needed to provide and support your subscription.

5. How we use personal information

We use it to provide and secure the Services, deliver purchases and manage subscriptions, enforce usage limits and detect abuse, provide customer support, meet legal and accounting obligations, and — in aggregated or de-identified form that does not identify you — understand how the product performs and improve it.

We do not use your documents, questions, answers, transcripts, or grades to train, fine-tune, or evaluate machine-learning models, ours or anyone else’s. We do not sell or share personal information for cross-context behavioural advertising, and we do not run advertising in the Services.

Where the law requires a lawful basis, we rely on: performance of our contract with you (providing the Services and your subscription); our legitimate interests (securing the Services, preventing abuse, improving the product); consent (where separately requested, such as optional communications); and compliance with legal obligations.

6. Service providers

We use a small number of vendors to operate the Services. Today these are:

• AI providers — to generate answers, questions, grades, and speech. Which provider receives your content depends on your configuration.
• Stripe — payments, billing, and subscription management.
• Render — hosting for the website and the gateway.
• GitHub — distribution of application downloads and updates.

These vendors act on our instructions under contracts that restrict their use of the data. We may add or change providers as the Services evolve; when we do, we will keep this section current and, where a change materially affects how personal information is handled, give notice as described in section 12.

7. Retention

We keep personal information only as long as it serves the purpose it was collected for. Concretely: licensing records for the life of the licence plus the period needed for accounting, tax, and dispute resolution; daily usage counters for a rolling short-term window sufficient to enforce limits; support correspondence for as long as needed to resolve the matter and maintain a service record; and transactional records for the period required by law. Content in transit through the gateway is not retained at all. Local data on your device persists until you delete it, and is removed by deleting the relevant Knowledge Space or uninstalling the application.

8. Security

We hold provider credentials server-side rather than distributing them to customer machines; store license keys only as one-way hashes; verify payment webhooks cryptographically; transmit everything over TLS; scope our payment-processor access to the minimum required; and keep request logging to method, path, and status so that customer content cannot enter our logs. No system is perfectly secure, and we do not claim otherwise. If a breach affects your personal information, we will notify you and any regulator as applicable law requires.

9. International transfers

We operate from Arizona, United States, and our service providers may process data in other countries. If you are outside the United States, using the Services means your information is processed in the United States, where privacy laws differ from those in your country. Where personal information moves out of the UK, EEA, or Switzerland, we rely on an approved transfer mechanism such as the European Commission’s Standard Contractual Clauses together with any additional safeguards required.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a portable copy of your personal information; to object to or restrict certain processing; to withdraw consent; and to complain to your data protection authority. If you are a California resident, you may exercise the rights afforded by the CCPA/CPRA, including the right to know, delete, correct, and opt out of sale or sharing — and as stated above, we do not sell or share personal information. We will not discriminate against you for exercising any right.

Much of your data never reaches us: documents, transcripts, and rehearsal history live on your device, where you can inspect or delete them directly. For anything we do hold, write to remo@remogroup.ai and we will respond within the period the applicable law requires.

11. Children

The Services are business tools intended for adults. They are not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

12. Changes to this policy

As BeInvestorReady grows we will add features, and this policy will change with them. We will always post the current version here with an updated effective date and version number. For changes that materially reduce your privacy protections or materially expand how we use personal information, we will give reasonable advance notice — by email to subscribers, in-product notice, or a prominent notice on this site — before the change takes effect. Continuing to use the Services after a change takes effect means you accept the updated policy.

13. Contact

Privacy and general enquiries: remo@remogroup.ai
Postal: RemoGroup.ai LLC, 2900 E Broadway Blvd, Suite 100, Tucson, AZ 85716, USA