Legal
Effective date: March 1, 2026 · Last updated: March 1, 2026
We collect: (a) Account information — your name, email address, business name, phone number, and billing information when you register; (b) Client data — phone numbers and names of your clients who interact with Rex or Ruby, imported CSV data, and behavioral event data (visit history, opt-out status); (c) Conversation data — messages sent between your Rex agent and your clients; (d) Usage data — dashboard activity, feature usage, and platform integration status; (e) Technical data — IP addresses, browser type, and device information collected automatically.
We use the information we collect to: provide, operate, and maintain the Service; deliver AI-powered messaging on your behalf; process billing and manage your subscription; send product updates, security alerts, and support messages; improve the Service and develop new features; comply with legal obligations and enforce our Terms of Service. We do not use your client data to train AI models without your explicit consent.
We do not sell your personal information or your clients' data. No mobile information collected through SMS opt-in will be shared with third parties or affiliates for marketing or promotional purposes at any time. We share data only with: (a) Service providers necessary to deliver the Service (Twilio for SMS, SendGrid for email, Anthropic for AI, Supabase for database, Stripe for billing, Clerk for authentication, Vercel for hosting); (b) Law enforcement or government authorities when required by law; (c) Acquirers in the event of a merger or acquisition, with advance notice to you.
Messages sent through Rex and Ruby are delivered via Twilio on your behalf. All recipients' phone numbers are stored with their opt-out status. We automatically honor STOP, UNSUBSCRIBE, QUIT, CANCEL, and END keywords per TCPA requirements. Message and data rates may apply for end recipients. You, as the business operator, are responsible for obtaining proper consent from your clients before using the Service to message them.
We retain your account data for the duration of your subscription plus 90 days after cancellation. Conversation history is retained for 12 months. Client contact data is retained as long as your account is active. You may request deletion of your data at any time by contacting hello@rexruby.ai. Certain data may be retained longer to comply with legal obligations.
We implement industry-standard security measures including AES-256-GCM encryption for stored credentials, TLS/HTTPS for all data in transit, Twilio signature validation for all inbound webhooks, and access controls via Clerk authentication. No system is perfectly secure. We will notify you of any data breach affecting your account within 72 hours of discovery.
Depending on your location, you may have rights to: access the personal data we hold about you; correct inaccurate data; request deletion of your data; opt out of certain data processing; data portability. California residents have additional rights under the CCPA. To exercise any of these rights, contact us at hello@rexruby.ai. We will respond within 30 days.
We use essential cookies to maintain your session and authentication state. We use analytics cookies (with your consent) to understand how the Service is used. We do not use advertising or tracking cookies. You can control cookie preferences through your browser settings.
When you connect third-party platforms (Acuity, Jane App, Google Calendar, Instagram, etc.), you authorize us to access and use data from those platforms to provide the Service. Your use of third-party platforms is governed by their own privacy policies. We are not responsible for the data practices of third-party platforms.
The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us immediately.
We may update this Privacy Policy periodically. We will notify you via email at least 14 days before material changes take effect. The "Last updated" date at the top of this page indicates when the most recent changes were made.
For privacy questions, requests, or concerns, contact our privacy team at: hello@rexruby.ai