Privacy policy

Last updated: November 11, 2026

This is a translation for convenience. If it differs from the Spanish version, the Spanish version prevails.

1. Data controller

  • Owner: RemoteBite – Pablo H.
  • Spanish tax ID (NIF): 70941839
  • Address: Consuelo 20, Oficina 3, Salamanca, Spain
  • Email: support@remotebite.com
  • Website: remotebite.com

2. What data we process

  • Account: name, email and password (stored only as a hash, never in plain text) and, if you turn it on, two-step verification. For each sign-in we store the IP address and browser to protect your account.
  • Computers: the computer's name, operating system, app version, RemoteBite ID, public key and when it was last online.
  • Remote connections: which account or computer connects, to which computer, and when it starts and ends. On the free plan and for connections without an account we also store the IP address you connect from, to enforce the one-connection-at-a-time limit.
  • Team: the members of your organization, their roles and the emails of the people you invite.
  • Payments: your plan and the status of your subscription. Payment details are collected by Dodo Payments; we never see your card.
  • Support: the messages you send us.
  • Technical logs: the server logs the requests it receives (IP address, date and requested address) for security and to fix errors.

What we can't see: the content of your sessions (the screen image, keyboard, mouse and clipboard) is end-to-end encrypted between the two computers. When a direct connection isn't possible it goes through our relay server, but encrypted: we can't see it and we don't store it.

3. Why we use it and on what legal basis

  • To provide the service (your account, computers, connections and team): performance of the contract (art. 6(1)(b) GDPR).
  • To charge and invoice paid plans: performance of the contract and compliance with legal obligations (art. 6(1)(b) and 6(1)(c) GDPR).
  • To keep the service secure, prevent abuse and fraud, and enforce the free plan's limits: our legitimate interest in protecting the service and its users (art. 6(1)(f) GDPR).
  • To send you service emails (verification, password reset, invitations and notices about your account or plan): performance of the contract. We won't send you advertising without your consent.
  • To answer your questions: your own request.

We don't make automated decisions with legal effects on you, and we don't build profiles.

4. How long we keep it

For as long as you have an account. If you delete it, we delete or anonymize your data, except what the law requires us to keep (for example, billing records, for the periods set by tax and commercial law) or what we need to handle claims while they can still be made. Technical logs and records of connections without an account are kept only as long as needed for security and abuse prevention.

5. Who we share it with

We don't sell your data. We only share it with:

  • Providers that process it on our behalf and on our instructions: server hosting and email delivery.
  • Dodo Payments, which sells the paid plans as Merchant of Record: it processes the payment, issues the invoice and handles taxes, and processes your payment details as a controller under its own privacy policy.
  • Authorities, when the law requires it.

If you belong to a team, its admins can see your name, email, computers and the team's connection activity.

6. International transfers

Some providers may process data outside the European Economic Area. In that case, the transfer is covered by the safeguards in the GDPR, such as a European Commission adequacy decision or its standard contractual clauses.

7. Your rights

You can access, correct and delete your data, object to its processing, ask us to restrict it, and request a copy to take elsewhere. Email us at support@remotebite.com from your account's email address; if we can't confirm it's you, we'll ask you to prove it. We'll reply within one month. If you think we haven't handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es) or to the authority where you live.

8. Cookies

We only use cookies the website needs to work:

  • The session cookie, which keeps you signed in to the dashboard.
  • lang, which remembers the language you chose for the website.

We don't use analytics or advertising cookies, so we don't ask for consent: these cookies are exempt under article 22.2 of the LSSI-CE.

9. Children

RemoteBite is not intended for children under 14, and we don't knowingly process their data.

10. Security

We apply technical and organizational measures to protect your data: end-to-end encrypted sessions, HTTPS connections, passwords stored as hashes, optional two-step verification and restricted access to our systems.

11. Changes

If we change this policy in a meaningful way, we'll let you know by email or on the website before it takes effect. The date of the last update is shown at the top.