Privacy notice
Last updated 29 September 2026
Who is responsible
Henri Sirkkavaara, Helsinki, Finland, operates Rednet and is the controller of the personal data described here. Contact: hello@rednet.ltd.
Summary
We keep what we need to run and bill the service, for as short a time as we can. We do not sell your data, share it for advertising, or use your questions to train any model. The website sets no cookies and runs no analytics.
What we keep, why, and for how long
| What | Why | How long |
|---|---|---|
| Your email address, company name and plan, and your VAT or business ID if you give it for a trial. | To provide the service and contact you about it (our contract with you). | While your account is open, then deleted within 90 days. |
| A one-way hash of each API key. We never store the key itself, so a lost key can only be replaced. | To check the key on each call. | Until you or we revoke the key. |
| Hashes of the access and refresh tokens an assistant receives when you connect Rednet through its sign-in flow. | To check the token on each call. | An hour for access tokens, 30 days for refresh tokens. You can revoke them at any time. |
| For each account, the number of calls to each tool per day. | Billing, the daily allowance, and spotting abuse (our legitimate interest in running a paid service fairly). | 13 months. |
| Search terms, as a one-way hash in the cache key and in the receipt for that search. The text of a tool call is used to answer it and is not stored with your account. | To serve repeat searches from the cache and to receipt each search. | 90 days. |
| For each public web page a tool reads for you: a receipt with the page address, the time and a hash of what came back, and a cached copy of the page. Neither is linked to your account. | To prove what was read, and to make the same read fast the next time. | Receipts 90 days, cached copies 30 days. |
| Server logs: IP address, time, request path and status code. Request bodies are not logged. | To keep the service secure and to fix faults. | 14 days. |
Payments
Paddle.com is our merchant of record and handles checkout, payment, invoices and VAT as an independent controller under the Paddle privacy notice. We never see your card details. Paddle tells us your name, email address, country, company details if you give them, and the status of your subscription, so we can set up and manage your account.
Who else processes data
- Cloudflare hosts this website and our DNS, and sees the IP addresses of visitors.
- Oracle Cloud Infrastructure hosts the Rednet servers in Zurich, Switzerland.
- Our email provider processes the emails you send us and our replies.
We share personal data with nobody else, unless the law requires it. Where a provider handles data outside the EU or EEA, the transfer relies on an adequacy decision (Switzerland, the United Kingdom, and the EU-US Data Privacy Framework) or on the European Commission's standard contractual clauses.
Your rights
You can ask for a copy of your personal data, and ask us to correct it, delete it, restrict its use, or send it to you in a portable format. You can object to processing based on our legitimate interest. Email hello@rednet.ltd and we will answer within one month. You can also complain to the Finnish Data Protection Ombudsman (tietosuoja.fi) or the supervisory authority where you live.
Changes
If we change this notice in a way that matters, we will email account holders before the change applies.