Privacy policy
This policy says what personal data RYNO handles. The website measures no audience. The desktop app keeps your work on your Mac and sends usage data only if you turn it on. The company service stores accounts in France, on OVHcloud, with Stripe, Google and Microsoft as subprocessors. Write to bonjour@isee-u.fr about your data.
Who is responsible
I SEE U, the publisher named in the legal notice, is responsible for the personal data described here. For any question about your data, or to exercise your rights, write to bonjour@isee-u.fr.
This website
getryno.app and its documentation measure no audience and show no advertising. The site sets one cookie, ryno_locale, only when you answer its suggestion to read it in French, and the documentation remembers the theme you pick, light or dark, in your browser. Your browser sends the cookie with each request to getryno.app, but no code on the server reads it, and the theme never leaves your browser: the cookie policy describes both.
The desktop app
The RYNO desktop app needs no account. Your requests, environments, local secrets and run history stay on your Mac, in your repository. RYNO asks whether a newer version exists, unless you turn Updates off.
Anonymous usage data leaves your Mac only if you turn it on, to Mixpanel in its EU region. It never holds a URL, a name or a secret. Turning it off in Settings, under Privacy, stops sending at once and deletes the identifier of your installation.
The company service
When your company uses Team or Business, and you sign in with Google or Microsoft, the service stores:
- your name and email address, as Google or Microsoft report them, and the company you belong to;
- your sign-in sessions, deleted once they have expired;
- the author of each publication of the shared catalog, kept for 365 days;
- the name of whoever removed a project from your company's workspace, kept for 365 days with the trace of that removal;
- whether your access was removed, and if so by whom and when, kept as long as your company exists, so that a removed access stays removed and can be restored;
- the domains you tried to claim for your company, kept for 365 days once the claim is closed or has expired;
- the actions of administrators in the governance log, kept for 365 days, which never holds a secret, a token or an email address;
- the billing details your company enters: its name, its address, and its VAT number if it gives one.
The service also writes a log line for each request it answers, which its host collects: the method, the route, the status, an identifier that ties the line to an error, and the request headers. Of the parameters in the address, it writes their names only, never their values. Of the headers, only a short list is written as sent: the format asked for and sent, the origin and the client software. Every other header, including your session, your token and your IP address as relayed by a proxy, is masked.
No card number and no IBAN reach RYNO: the payment fields belong to Stripe. A VAT number is checked with VIES, the service of the European Commission, which receives the number and nothing else. Your local requests and local secrets never reach the service.
Where the data goes
The data of the company service is hosted in France, on OVHcloud. Payment and sign-in go through subprocessors outside that hosting.
| Subprocessor | What it does | What it processes | Where |
|---|---|---|---|
| OVHcloud | Hosts the service, its databases and their backups. | Everything the service stores. | France |
| Stripe | Takes payment by card, confirmed with 3-D Secure, or by SEPA Direct Debit, and handles invoicing. | What payment and invoicing require. | Outside the OVHcloud hosting |
| Confirms who signs in, and your company's domain, when your company works with Google accounts. | The sign-in, and the name and email address it reports. | Outside the OVHcloud hosting | |
| Microsoft | Confirms who signs in, and your company's domain, when your company works with Microsoft accounts. | The sign-in, and the name and email address it reports. | Outside the OVHcloud hosting |
| Mixpanel | Receives the anonymous usage data of the desktop app, only if you turn it on. | Shapes of use, never a URL, a name or a secret. | Its EU region |
Your rights
You can ask to access, correct or erase your data, to restrict or object to its use, and to receive it in a portable form. Write to bonjour@isee-u.fr. If you ask for erasure, your name in the governance log is replaced by a neutral mention, so the history of who could access what stays true.
You can also lodge a complaint with the CNIL, the French data protection authority, at cnil.fr.
More detail
Security, GDPR and hosting says what stays on your Mac, what the service keeps, and how long backups last.