Privacy notice

Relumea is operated by Serpio Pte. Ltd. (UEN 202642849C), a company registered in Singapore at 68 Circular Road, #02-01, Singapore 049422. For privacy and support enquiries, contact [email protected].

What this service stores about you, why, and when it leaves.

Account data

Sign-in runs through Casdoor, self-hosted alongside this service. It holds your username, display name, email address, password hash (argon2id), any passkey or authenticator you enrol there, and its own sessions and sign-in records. This service reads your current profile from Casdoor, keeps your native subject with product status and personal workspace, and stores digests of API keys and session tokens.

Usage and billing

The product stores metered compile events (toolchain, outcome, units and artifact reference), resource reservations and the audit trail of account actions to enforce allowances and answer support questions. Casdoor holds the native subscription and plan assignment; this service reads its current state without retaining a second subscription or payment-event mirror. Paid checkout is closed and this product collects no payment details.

Artifacts and source

Compiled bytes are stored for the plan’s retention window, then retired and removed by maintenance. Source text is held only for the duration of the compile unless artifact or training capture applies, as documented on the plan.

Public content

On the free plan, approved members can discover your Workbench projects, view completed binaries and compare their stored static inspections. Public projects show project and file names, your display name or handle, file hashes and measurements, and inspection results. Pending-review and anonymous visitors cannot access this content. Paid-plan projects can be Public or Private. New paid projects start Private. Deleting an upload removes it from Public discovery; account and billing information, API keys, sessions and audit logs are never included.

Cloudflare

Requests reach this service through Cloudflare, which provides its DNS, TLS and proxy and so handles every request, including your IP address. Cloudflare adds its Web Analytics script to these pages. Cloudflare states that Web Analytics uses no cookies or local storage and does not fingerprint visitors; it records page views with the path, referrer, browser, operating system, device type and country. This portal’s own pages block that script with their content security policy; the sign-in pages do not.

Mail and notices

Product notices (welcome and allowance warnings) are queued and listed on the notices page, and mailed to the account address when this deployment sends mail. Mail content ages out on the deployment’s mail retention horizon.

Your controls

Export this service’s records of your account any time as CSV and ZIP from the dashboard, including the audit trail. Closing the account from settings marks it closed, signs out its browser sessions, revokes its API keys and refuses further sign-in here. Product records remain subject to their retention schedules; this service does not provide a closed-account deletion operation. Closing does not close or erase your Casdoor account; its records and sign-in remain separate. Sessions, links, usage and audit rows leave on their retention horizons, and artifacts on the plan’s retention window.

Questions: email [email protected].

Product account records retain your native subject identifier, product status and personal workspace link. Explicit policy acknowledgements retain the document version, content digest and acceptance time.