Privacy Policy

Rimb takes on different roles depending on the nature of the relationship. For demo requests, website accounts, and footage collected through our own capture app and contributor network, Rimb acts as the data controller (or “business,” under US state law) – meaning we decide the purposes and methods of processing that personal data, as described throughout this Privacy Policy. In one specific case, Rimb instead acts as a data processor (or “service provider”): when a customer uploads their own already-recorded footage – for example, from a connected storage bucket – for us to annotate. In that case, the customer remains the controller of that footage, and Rimb processes it only as instructed under a separate Data Processing Agreement with that customer, not under this Privacy Policy.

If you'd like more detail on which role applies to your specific data, contact us at privacy@rimb.dev.

Demo requests. When you submit the form on our landing page we collect the name, email address, company, job title, country, and free-text notes you provide. We store these so we can reply to you and so our team can prioritise outreach. The form is protected by Cloudflare Turnstile, which receives request metadata directly from your browser to help us block automated abuse.

Accounts. If you sign up, we store your email, password hash, and the workspaces, projects, datasets, and other resources you create. We also keep session records (token hash, expiry, originating IP, user-agent) so we can detect suspicious sign-ins, and authentication attempts are protected by Cloudflare Turnstile in the same way.

Automatically collected data. Like most websites, when you visit rimb.dev we automatically receive some technical information from your browser or device – your IP address, browser type and version, device type, operating system, referring URL, and the pages you visit. This is primarily used to keep the Site secure, diagnose issues, and understand aggregate usage; it isn't used to identify you individually outside of the analytics/advertising cookies described below.

Footage and contributor data. If you record or submit footage through our capture app or contributor network, we collect the video itself along with the consent details captured at the point of recording (who appears, what they agreed to, capture date and context). For new recordings made in the mobile capture app, we also collect one precise device-location fix, its accuracy, and its capture time immediately before recording starts. Exact location values are retained as internal database metadata and are not exposed through client-facing APIs. This is governed primarily by the consent packet / release agreement you sign as a contributor, which sets out the specific terms in full; this Privacy Policy covers how Rimb handles that data as the data controller.

Analytics & advertising. Only if you consent, we use Google Analytics (via Google Tag Manager) and the Meta Pixel to understand site usage and measure our advertising. These are off by default and load only after you accept them; we do not sell your data. See our Cookie Policy for the full list and to change your choice.

Footage submitted to Rimb – whether through the capture app, the contributor network, or a connected storage bucket – may be processed by automated models to produce annotation layers such as object tracks, hand poses, action segments, and language labels. This automated processing may involve personal information where a clip contains identifiable people (for example, hands or faces in frame).

For footage collected through our own capture app and contributor network, this processing happens under Rimb's role as data controller, as described above. For footage a customer uploads from their own connected storage bucket, this same automated processing happens under Rimb's role as data processor, on that customer's instructions and under our Data Processing Agreement with them. Every annotated episode goes through human quality assurance review before it ships, so no episode is delivered to a customer based solely on unreviewed automated output. We do not use these models to make decisions that produce legal or similarly significant effects about you.

Consent. We rely on your consent to load analytics and advertising cookies (Google Analytics, Meta Pixel), and to collect footage through our contributor network under the terms of your consent packet / release agreement. You can withdraw consent at any time – see our Cookie Policy for cookies, or contact us at privacy@rimb.dev for footage.

Contract. We process your information when necessary to operate the account, workspace, or other resources you set up with us, or to fulfil an agreement with you as a contributor or customer.

Legitimate interest. We process your information when we believe it's reasonably necessary to pursue our legitimate business interests, and that interest doesn't outweigh your rights, including to:

• respond to demo requests and other enquiries;
• keep the Site and our Services secure, including detecting and preventing abuse;
• understand, at an aggregate level, how our Services are used so we can improve them.

Legal obligation. We process your information where necessary to comply with the law, such as keeping the minimum records required by tax, accounting, or security-incident regulations.

As a general principle, we keep personal information only for as long as necessary to fulfil the purpose it was collected for, or as required by law. Demo requests are kept until we close them out, then for up to 24 months so we can recognise repeat enquiries. Account data is kept while your account is active and for up to 90 days after deletion (to allow for accidental-deletion recovery), after which backups are rotated out. Footage and consent records collected through our capture app or contributor network are kept for the retention period set out in your consent packet / release agreement, or as otherwise required by applicable biometric privacy law. Analytics and advertising cookie data is kept for the periods listed in our Cookie Policy.

We may share your data with the following categories of third parties:

• Service providers who process data on our behalf to run the Service – our cloud host, our database provider, our object storage provider, and Cloudflare for bot protection.
• Analytics and advertising providers, where you've consented to analytics or advertising cookies – Google (Analytics) and Meta (the Pixel) – who help us understand and improve the Site.
• Law enforcement or regulatory agencies, or other authorized parties, in response to a verified request relating to a criminal investigation, alleged illegal activity, or any other activity that may expose Rimb, a user, or a third party to legal risk or liability.

These third parties process your data only for the purposes described above, and in accordance with applicable law. A full, named list of our service providers is available on request at privacy@rimb.dev.

If you're a Rimb customer receiving annotated footage under a Data Processing Agreement, that delivery is governed by that agreement, not by this section – see Rimb's role in data processing above.

We use administrative, technical, and physical safeguards designed to protect the personal information we hold, including encryption of data in transit, access controls limiting who at Rimb can view personal data, and routine review of our security practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal data, we will notify you and any relevant authority as required by applicable law.

Rimb is based in the United States and works with service providers located in the United States and other countries. As a result, your personal data may be transferred to, stored in, or processed in countries outside the jurisdiction where you live, including outside the EEA, the United Kingdom, and Switzerland. Some of these countries may have data protection laws that differ from those in your jurisdiction. Where applicable, we rely on appropriate transfer safeguards made available by our service providers, including Standard Contractual Clauses, data processing addenda, and other recognized transfer mechanisms. For example, our cloud hosting, analytics, and infrastructure providers may process personal data under their standard data protection terms. Rimb generally relies on these provider-offered safeguards rather than entering into separately negotiated Standard Contractual Clauses with each provider.

If you're in the EU, EEA, UK, or another region with similar protections, you have the following rights over the personal data we hold about you:

• Access. You can ask what personal data we hold about you. We'll need to verify your identity before releasing it.
• Correction or deletion. You can ask us to correct inaccurate data, or delete data we hold about you – unless we're legally required or entitled to keep it.
• Restriction. You can ask us to limit how we use your data if you think it's inaccurate, if our use of it is unlawful, or if we no longer need it for the purpose we collected it for.
• Withdrawing consent. Where we rely on your consent – for analytics/advertising cookies, or for footage collected under a consent packet – you can withdraw it at any time, through our Cookie Settings or by emailing us at privacy@rimb.dev.
• Portability. Where we're processing data you gave us based on your consent, you can ask for a copy in a structured, commonly-used format, and to have it transmitted to another controller.
• Automated decision-making. We don't use automated processing to make decisions that produce legal or similarly significant effects about you. If you have questions about how our automated annotation models work, you can reach out below.
• Complaints. If you're unhappy with how we've handled your data, tell us first – we'll do our best to sort it out. If you're still not satisfied and you're located in the EEA, UK, or Switzerland, you also have the right to lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, email privacy@rimb.dev. For demo requests specifically, you can also use the form below to remove your data immediately, without contacting us.

If you are a resident of California, Virginia, Colorado, Connecticut, Utah, or another US state with a comprehensive privacy law, you may have some or all of the following rights regarding your personal information:

• Right to know what personal information we have collected about you and how we use and share it.
• Right to delete personal information we have collected about you, subject to certain exceptions.
• Right to correct inaccurate personal information we hold about you.
• Right to opt out of the “sale” or “sharing” of your personal information, or of targeted advertising. If you're under 16, this requires opt-in rather than opt-out under California law. Rimb only uses analytics/advertising cookies with your consent (see our Cookie Policy) – see also Who We Share It With above.
• Right to non-discrimination or non-retaliation for exercising any of these rights.

To exercise any of these rights, email privacy@rimb.dev. We may need to verify your identity before completing your request; California residents may submit up to two access requests per year, and we aim to respond to California-specific requests within 45 days. If you are not satisfied with our response, you may have the right to appeal, or to contact your state Attorney General.

If you are a California resident, you may request, once per year and free of charge, information about the categories of personal information (if any) we disclosed to third parties for their own direct marketing purposes in the preceding calendar year. Rimb does not share personal information with third parties for their own direct marketing purposes, but you may still submit this request to privacy@rimb.dev.

Australia and New Zealand. If you are located in Australia or New Zealand, you have the right to request access to or correction of your personal information by emailing privacy@rimb.dev. If you believe we have handled your personal information unlawfully, you may lodge a complaint with the Office of the Australian Information Commissioner (for Australia) or the Office of the New Zealand Privacy Commissioner (for New Zealand).

South Africa. If you are located in South Africa, you have the right to request access to or correction of your personal information by emailing privacy@rimb.dev. If you are not satisfied with how we've addressed a complaint, you can contact the Information Regulator (South Africa) at enquiries@inforegulator.org.za.

Rimb's services are not directed to, and are not intended for use by, anyone under the age of 18, or the age of majority in their jurisdiction. We do not knowingly collect personal information from anyone under that age. This applies both to our website (demo requests, accounts) and to our capture app and contributor network – all contributors submitting footage through Rimb must meet this age requirement. If we learn that we have collected personal information from someone underage, we will delete it. If you believe a minor has provided us with personal information, please contact us at privacy@rimb.dev.

We may update this Privacy Policy from time to time. If we make a material change, we'll update the “Last updated” date at the top of this page and, where appropriate, let you know through a notice on the Site or by emailing registered users. We encourage you to check back periodically.

For any question, request, or complaint about this Privacy Policy or how we handle your personal data, reach us at:

Email: privacy@rimb.dev

To help us route your request quickly, please mention what it's about (for example, “Access request,” “US State Privacy Rights,” or “Data deletion”) in your email.