Trust
Security at RenewOS
Trust through deterministic rules and transparent architecture — not through analyzing your data.
PBKDF2
Salted password hashing
0
Cloud AI / model training
20 MB
Attachments, private storage
Anytime
Export CSV / JSON / ICS
No cloud AI — by design
No AI server ever sees your documents. Reminders, status calculations and reporting are deterministic, auditable rules that behave the same way every time — and the optional "Detect expiry date" scan is plain text recognition that runs entirely on your own device. Your content is never used to train models.
How we protect your data
Six controls, always on
Authentication
PBKDF2 salted password hashing. Rate-limited login with temporary lockout. Individually revocable sessions. Single-use, time-limited reset tokens.
Authorization
Server-side ownership checks on every protected request. Cross-user and cross-workspace data access is blocked at the database query level.
Private attachments
Files live in private cloud storage. Downloads require a signed, 15-minute expiring URL generated upon authenticated request.
Audit logging
Security-sensitive admin actions are recorded with timestamps and actor identity. You can review and revoke all your active sessions.
Reminder safety
Reminders are deduplicated by an idempotency key tied to the item, rule and target expiry. Archived items stop generating reminders. Retries are bounded with exponential back-off.
Data portability
Export everything as CSV, JSON or ICS at any time. Delete your account at any time. No data hostage situations.
OAuth 2.0 PKCE & token encryption
Third-party calendar credentials (Google and Microsoft) use modern OAuth 2.0 PKCE. Tokens are stored using AES-256-GCM encryption with immediate revocation upon disconnection.
Plain language
What we store, where, and who can see it
| What | Where it lives | Who can see it |
|---|---|---|
| Item records (names, dates, providers, amounts) | Encrypted-at-rest application database | Only you (and your workspace members, on Business) |
| Attachments (PDF, PNG, JPEG, WebP · 20 MB max) | Private object storage — never a public bucket | Only you, via signed 15-minute temporary URLs generated during an authenticated session |
| Credentials | PBKDF2 salted hashes — never plaintext | Nobody, including us |
| OAuth 2.0 Tokens (Google Calendar, Outlook) | Encrypted-at-rest with AES-256-GCM — minimal scoped permissions | RenewOS background sync workers strictly for scheduling events; revokable in 1 click |
| Email address | Application database — used only for reminders and account notices | Transmitted to vetted transactional delivery providers solely to send your alerts; never sold or shared for marketing |
| Reminder delivery logs | Idempotent event records, retained for reliability | Used to deduplicate and retry — not for profiling |
Encrypted at rest & in transit
Access controls and encryption at rest for stored data and attachments. All network traffic in transit is encrypted using modern TLS (HTTPS).
Data privacy rights
Full access, correction, export, and deletion of your data. Read our Privacy Policy for complete processing details.
Delete means delete
Account deletion removes your records. Export your data first — we cannot restore accounts once permanently deleted.
Responsible disclosure
Found a security issue? Email [email protected] immediately with "SECURITY" in the subject. We investigate every report within one business day and credit responsible researchers. Please do not publicly disclose the issue until we've had a chance to fix it.