RMUX Agent Privacy Policy

Effective date: 27 July 2026
Last updated: 27 July 2026
Website: https://rmux.ai

This Privacy Policy explains how KYANXU TECHNOLOGY PTE. LTD. ("KYANXU", "we", "us" or "our") collects, uses, discloses and protects personal data when you use RMUX Agent (RMUX智能体), https://rmux.ai, our APIs and related services (collectively, the "Services").

1. Who we are

RMUX Agent is operated by KYANXU TECHNOLOGY PTE. LTD., a company incorporated in Singapore.

Our Data Protection Officer may be contacted at service@kyanxu.com. We use the same mailbox for privacy requests, complaints and general support.

2. Scope and roles

This Policy applies to individual users, website visitors, API users and people who use the Services through an organisation.

For account, billing, website and direct customer relationship data, KYANXU generally determines why and how the data is processed. Where an enterprise customer uses the Services to process data under its own instructions, that customer may be responsible for the data and KYANXU may act as its data intermediary or processor. The enterprise customer's own privacy notices and policies may also apply.

3. Personal data we collect

We may collect the following categories of data:

• Account and contact data: name, email address, organisation, account identifier, authentication information, preferences and communications.
• Customer Content and Task Data: prompts, instructions, files, API payloads, agent settings, user-visible plans and task steps, tool results, generated outputs, feedback and related records needed to perform a task.
• Technical and usage data: IP address, device and browser information, timestamps, login events, feature usage, error records, approximate location derived from IP address and security logs.
• Transaction data: plan, order, invoice, payment status, credits, usage and refund records. Payment card details are normally collected directly by our payment processor rather than stored by KYANXU.
• Support, safety and compliance data: support requests, task identifiers you provide for troubleshooting, abuse reports, security investigation records and information required to comply with law.
• Cookie and similar technology data: information described in our Cookie Notice at https://rmux.ai/legal/cookies.

Please do not submit data that you are not authorised to use. Do not submit highly sensitive data unless an approved feature and written agreement expressly support that use.

4. How we use personal data

We may use personal data to:

• provide, operate, secure and improve the Services;
• create and administer accounts and workspaces;
• process prompts, files, tasks and outputs;
• route requests to approved AI, cloud and technical providers;
• measure usage, apply credits and process payments;
• provide customer support and investigate technical issues;
• detect fraud, abuse, security incidents and policy violations;
• communicate service, billing, security and policy updates;
• comply with legal, regulatory, accounting and contractual obligations; and
• create aggregated or de-identified information that does not reasonably identify an individual.

Where applicable law requires a legal basis, we rely on the performance of a contract, consent, legitimate interests, compliance with legal obligations or another lawful basis available under that law.

5. How we disclose personal data

We may disclose personal data:

• to approved AI model, cloud hosting, infrastructure, security, communications, customer support and payment providers that help us operate the Services;
• to a third-party service or integration when you direct the Services to interact with it;
• to your organisation's workspace owner or administrator, where the organisation's configuration permits access to account information, usage, Customer Content, task records or audit information;
• to professional advisers, auditors, insurers and authorities where reasonably necessary;
• to protect users, KYANXU, third parties or the public from fraud, abuse, security threats or unlawful conduct; and
• in connection with a merger, financing, acquisition, reorganisation or sale of all or part of our business, subject to appropriate confidentiality and data protection measures.

We do not sell personal data as a standalone product.

6. AI providers and international transfers

The Services may use third-party AI model and cloud providers. The provider used for a request may vary by feature, availability, performance, safety settings or enterprise configuration. These providers may process Customer Content and technical data to deliver the requested service.

Personal data may be processed in Singapore and other countries where KYANXU or its service providers operate. Where data is transferred outside Singapore, we use contractual, organisational or other safeguards intended to provide a standard of protection comparable to that required under applicable law.

Enterprise customers may request current information about material providers and processing arrangements by contacting service@kyanxu.com.

7. Model training and service improvement

Unless you separately opt in or an enterprise agreement expressly states otherwise, KYANXU does not use identifiable Customer Content to train a general-purpose model made available to unrelated customers.

We may use limited Customer Content when necessary to provide the Services, respond to support requests, investigate abuse or security incidents, comply with law or evaluate service quality. We may use aggregated or properly de-identified information to improve performance, reliability and safety.

Third-party providers process data under their own contractual terms and the technical settings selected for the Services. We seek business or API arrangements appropriate for customer data, but provider-specific processing may differ by service and configuration.

8. Data retention

We retain personal data only for as long as reasonably necessary to provide the Services, fulfil the purposes described in this Policy, comply with legal, accounting and regulatory obligations, resolve disputes, investigate security incidents and enforce our agreements.

Retention periods vary according to the nature of the data and the purpose for which it is used. When personal data is no longer required, we delete it, anonymise it or otherwise cease retaining it, subject to legal holds, fraud and security investigations and normal backup rotation cycles.

9. Security

We use reasonable administrative, technical and organisational measures designed to protect personal data. These may include access controls, authentication, encryption in transit, logging, tenant separation, supplier controls and incident response procedures, as appropriate to the service.

No online service is completely secure. You are responsible for protecting your credentials, using appropriate access controls and promptly reporting suspected unauthorised access.

10. Your choices and rights

Subject to applicable law, you may ask us to:

• provide access to personal data we hold about you;
• correct inaccurate or incomplete personal data;
• delete personal data that is no longer required;
• withdraw consent for a particular use;
• object to or restrict certain processing where the law provides that right; or
• explain how a material privacy concern has been handled.

Send requests from your registered email address to service@kyanxu.com. We may need to verify your identity and may retain information where required by law, security, accounting or legitimate business needs.

You may unsubscribe from optional marketing messages using the link in the message or by contacting us. Service, security and billing messages may still be sent where necessary.

11. Organisation workspaces

If you use the Services through an employer, school or other organisation, the organisation may manage your account and may be able to access or control information associated with the workspace, including usage and, depending on configuration, Customer Content and task records. Review the organisation's policies before submitting personal or confidential information.

12. Children

The Services are not intended for people under 18 or under the age of majority in their place of residence. We do not knowingly invite children to create accounts. Contact us if you believe a child has provided personal data without appropriate authorisation.

13. Changes to this Policy

We may update this Policy as the Services, providers or legal requirements change. We will post the updated version on https://rmux.ai and change the "Last updated" date. Where a change is material, we will provide additional notice when reasonably appropriate.

Privacy and DPO contact: service@kyanxu.com. Operator: KYANXU TECHNOLOGY PTE. LTD., Singapore. Website: https://rmux.ai.