Snapshot 44905
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Privacy Policy
Introduction
Rexpt Corp. ("Rexpt," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (rxpt.us), use our Voice AI platform, or interact with us in any other way.
Please read this Privacy Policy carefully. By accessing or using our Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our Platform.
This Privacy Policy applies to:
Our website at rxpt.us and related subdomains
Our Voice AI platform and services
Our mobile applications
Our communications with you, including email, SMS, and phone
Our interactions with you at events or through other channels
Table of Contents
1. Information We Collect
We collect different types of information depending on how you interact with us. This section explains what information we collect, from whom, and how.
1.1 Information You Provide to Us
Account Information
When you create an account, we collect:
Name (first and last)
Email address
Phone number
Company/business name
Business address
Industry type
Password or authentication credentials (if applicable)
Billing Information
When you subscribe to our services, we collect:
Payment method details (processed by Stripe; we do not store full card numbers)
Billing address
Tax identification numbers (where required)
Knowledge Base Content
When you configure your AI Agent, you may provide:
Business information and descriptions
Products and services details
Frequently asked questions and answers
Uploaded documents (PDFs, spreadsheets, etc.)
Website URLs for content extraction
Communications
When you contact us, we collect:
Support ticket content and correspondence
Feedback and survey responses
Email and chat communications
Partner Information
If you join our Partner Program, we additionally collect:
Tax information for commission payments
Payout preferences and bank details
Marketing materials you submit
Job Applicant Information
If you apply for a job, we collect:
Resume/CV and cover letter
Employment history
Education background
References
1.2 Information Collected Automatically
Device and Usage Information
When you access our Platform, we automatically collect:
IP address and approximate location
Browser type and version
Operating system
Device type and identifiers
Pages visited and features used
Time spent on pages
Referring website or source
Click patterns and navigation paths
Cookies and Tracking Technologies
We use cookies, pixels, and similar technologies to collect information. For detailed information about our use of cookies, please see our Cookie Policy.
1.3 Information from Third Parties
We may receive information about you from:
Single Sign-On providers (Google, Apple, Facebook, Microsoft) when you choose to authenticate through them
Google Places API when extracting business information
Payment processors regarding transaction status
Partners who refer you to our Platform
Publicly available sources for business verification
1.4 End User (Caller) Information
When individuals call phone numbers connected to our Platform, we collect:
Caller phone number (Caller ID)
Call date, time, and duration
Voice recordings of the conversation
Transcripts generated from the recording
AI-generated call summaries
Sentiment and intent analysis
Any information the caller voluntarily provides during the call
Important Notice for Callers:
If you are calling a phone number that uses Rexpt's AI Agent, you are interacting with our customer's business. The business (our customer) is the data controller for your call data, and we process this data on their behalf. Please refer to that business's privacy policy for information about how they handle your data.
2. How We Use Your Information
We use the information we collect for the following purposes:
2.1 Providing and Improving Our Services
Creating and managing your account
Processing your subscription and payments
Providing the Voice AI platform functionality
Handling and transcribing calls through your AI Agent
Integrating with third-party services you connect
Providing customer support
Analyzing usage to improve our services
Developing new features and products
2.2 Communications
Sending transactional emails (account confirmations, billing receipts, security alerts)
Sending service-related notifications (feature updates, maintenance notices)
Sending marketing communications (with your consent or as permitted by law)
Sending newsletters and blog updates
Sending promotional offers and festive greetings
Sending SMS notifications and updates
2.3 Security and Fraud Prevention
Detecting and preventing fraudulent activity
Monitoring for security threats
Enforcing our Terms of Use
Protecting our rights and the rights of others
2.4 Legal and Compliance
Complying with legal obligations
Responding to legal requests and court orders
Establishing, exercising, or defending legal claims
2.5 Analytics and Research
Understanding how users interact with our Platform
Measuring the effectiveness of our marketing
Conducting research and analysis
Creating aggregated, anonymized insights and benchmarks
2.6 Partner Program
Tracking referrals and attributions
Calculating and processing commission payments
Communicating partner program updates
3. Legal Basis for Processing (EEA/UK Users)
If you are located in the European Economic Area (EEA) or United Kingdom (UK), we process your personal data based on the following legal grounds:
Where we rely on legitimate interests, we have conducted a balancing test to ensure our interests do not override your fundamental rights and freedoms. You may contact us for more information about this assessment.
4. How We Share Your Information
We do not sell or rent your personal information to third parties. Text messaging originator opt-in data and consent will not be shared with any third parties, affiliates, or partners for marketing or promotional purposes. We may share your information in the following circumstances:
4.1 Service Providers (Sub-processors)
We share information with third-party service providers who perform services on our behalf, including:
Cloud hosting and infrastructure providers
Payment processors
Email and SMS delivery services
Analytics providers
Customer support tools
AI and voice processing services
These providers are contractually bound to protect your information and may only use it for the purposes we specify.
4.2 Business Customers
For End Users (callers), we share call data with the business customer whose AI Agent handled your call. This includes call recordings, transcripts, and related analytics. The business customer is the data controller for this information.
4.3 Integrated Third-Party Services
When you connect third-party services to your account (such as Google Calendar, CRM systems, or POS systems), we share relevant data with those services as necessary to provide the integration functionality.
4.4 Partners
If you were referred by a partner, we may share limited information (such as your account status) with that partner for attribution and commission purposes.
4.5 Legal Requirements
We may disclose your information if required to do so by law or in response to valid legal requests, including:
Court orders and subpoenas
Government or regulatory agency requests
Law enforcement requests
4.6 Business Transfers
If Rexpt is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.
4.7 With Your Consent
We may share your information for other purposes with your explicit consent.
4.8 Aggregated and Anonymized Data
We may share aggregated, anonymized data that does not identify you personally. This data may be used for industry analysis, benchmarking, marketing, and other business purposes. For example, we may publish statistics about call volumes or AI performance metrics.
5. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect information about your browsing activities. This section provides a summary; please see our separate Cookie Policy for complete details.
5.1 Types of Cookies We Use
Cookie Type Purpose Examples
Strictly Necessary Essential for website functionality Session cookies, security cookies
Performance/Analytics Understand how visitors use our site Google Analytics, Mixpanel
Functionality Remember your preferences Language settings, login state
Advertising/Targeting Deliver relevant ads, measure campaigns Google Ads, Facebook Pixel, LinkedIn Insight
Session Recording Understand user behavior and improve UX Hotjar, Microsoft Clarity
5.2 Third-Party Tracking
We use the following third-party services that may place cookies or collect information:
Google Analytics (GA4) - Website analytics
Mixpanel - Product analytics
Google Ads - Advertising and remarketing
Facebook Pixel - Advertising and conversion tracking
LinkedIn Insight Tag - B2B advertising
Hotjar - Session recording and heatmaps
Microsoft Clarity - Session recording and analytics
5.3 Cookie Consent
When you first visit our website, you will be presented with a cookie consent banner that allows you to:
Accept all cookies
Reject non-essential cookies
Customize your cookie preferences by category
You can change your cookie preferences at any time by clicking the "Cookie Settings" link in our website footer.
5.4 Do Not Track
Some browsers have a "Do Not Track" feature. Our website does not currently respond to Do Not Track signals. However, you can manage your tracking preferences through our cookie consent tool.
5.5 Partner Attribution
We use first-party cookies to track partner referrals for our affiliate program. These cookies have a 60-day retention period and help us attribute sign-ups to the correct partner.
6. Data Retention
We retain your information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law.
6.1 Account Deletion
When you delete your account or request deletion, we will delete your personal data within seven (7) days, except for:
Data we are required to retain by law (such as billing records)
Data necessary to establish, exercise, or defend legal claims
Aggregated, anonymized data that does not identify you
How to Request Account Deletion To request deletion of your Rexpt account, follow these steps:
Log in to your account at app.rxpt.ai
Go to Edit Profile and scroll to the bottom
Submit an account deletion request by clicking on "Delete Profile"
Your account and associated data will be deleted within 7 Days of your request. If you are unable to access your account, email us at support@rxpt.us with the subject line "Account Deletion Request," and we will process it manually.
6.2 End User Data
Call recordings and transcripts for End Users (callers) are automatically deleted after 90 days. Our business customers may request earlier deletion of their call data.
7. Your Privacy Rights
Depending on your location, you may have certain rights regarding your personal information.
7.1 Rights for All Users
All users may:
Access their account information through the Platform
Update or correct their account information
Delete their account
Unsubscribe from marketing communications
Contact us with privacy questions or concerns
7.2 Rights for EEA/UK Residents (GDPR)
If you are located in the EEA or UK, you have the following additional rights:
Right of Access: Request a copy of your personal data
Right to Rectification: Request correction of inaccurate data
Right to Erasure: Request deletion of your data ("right to be forgotten")
Right to Restriction: Request limitation of processing
Right to Data Portability: Receive your data in a machine-readable format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
Right to Lodge a Complaint: File a complaint with your local supervisory authority
7.3 Rights for California Residents (CCPA/CPRA)
If you are a California resident, you have the following rights:
Right to Know: Request information about the categories and specific pieces of personal information we collect
Right to Delete: Request deletion of your personal information
Right to Correct: Request correction of inaccurate information
Right to Opt-Out of Sale: We do not sell personal information, so this right does not apply
Right to Non-Discrimination: We will not discriminate against you for exercising your rights
7.4 How to Exercise Your Rights
To exercise any of your privacy rights, please contact us at:
Email: privacy@rxpt.us
Subject: Privacy Rights Request
Please include:
Your full name
Email address associated with your account (if applicable)
Description of your request
Any information that helps us verify your identity
We will respond to your request within thirty (30) days. If we need additional time, we will notify you of the reason and extension period (up to an additional 60 days for complex requests).
7.5 Identity Verification
To protect your privacy and security, we may require verification of your identity before processing your request. For sensitive requests (such as data deletion or access to detailed records), we may require formal identification verification.
7.6 Authorized Agents
You may designate an authorized agent to make requests on your behalf. We will require verification of the agent's authorization and your identity.
8. International Data Transfers
8.1 Data Location
Your personal data is primarily stored and processed in the United States. By using our Platform, you acknowledge that your data will be transferred to and processed in the United States.
8.2 Transfer Mechanisms
For transfers of personal data from the EEA or UK to the United States, we rely on:
Standard Contractual Clauses (SCCs) approved by the European Commission
UK International Data Transfer Addendum for UK transfers
Supplementary measures including encryption and access controls
8.3 EU/UK Representative
For users in the European Union and United Kingdom, we have appointed a representative:
EU/UK Representative:
Name: Ricardo Ramos
Email: ric@rxpt.us
Address: [Address to be added]
You may contact our representative for any matters relating to GDPR compliance.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.
9.1 Security Measures
Our security measures include:
Encryption of data in transit (TLS 1.3)
Encryption of data at rest (AES-256)
Access controls and authentication requirements
Regular security assessments and penetration testing
Employee training on data protection
Incident response procedures
Secure software development practices
9.2 Your Responsibilities
You are responsible for:
Keeping your login credentials confidential
Using strong, unique passwords
Logging out after each session on shared devices
Notifying us immediately of any unauthorized access
9.3 Security Incidents
Despite our efforts, no method of transmission over the Internet or electronic storage is 100% secure. If a security breach occurs that affects your personal information, we will notify you as described in Section 10.
10. Data Breach Notification
10.1 Our Commitment
In the event of a data breach that affects your personal information, we are committed to notifying affected individuals promptly and transparently.
10.2 Notification to Account Holders
If a breach affects your Rexpt account, we will notify you via:
Email to your registered email address
SMS to your registered phone number
The notification will include information about the nature of the breach, the data affected, and steps you can take to protect yourself.
10.3 Notification for End Users (Callers)
If a breach affects call recordings or other End User data, we will notify our business customer (the data controller) within 72 hours. The business customer is responsible for determining whether and how to notify affected callers, in accordance with applicable law.
10.4 Public Disclosure
For significant breaches, we may post notifications on our website or status page to ensure broad awareness.
10.5 Regulatory Notification
Where required by law, we will notify relevant supervisory authorities within the required timeframes (e.g., 72 hours under GDPR).
11. Marketing Communications
11.1 Types of Communications
We may send you the following types of communications:
Transactional (Cannot Opt-Out):
Account confirmations and security alerts
Billing receipts and payment notifications
Service disruption notices
Legal and policy updates
Service-Related:
Feature announcements and product updates
Tips and best practices
Usage summaries and reports
Marketing:
Newsletters and blog updates
Promotional offers and discounts
Festive greetings
Partner and event announcements
SMS marketing messages
11.2 Marketing Consent
For existing customers, we may send marketing communications about similar products and services based on our legitimate interests ("soft opt-in"), provided you have the opportunity to opt-out.
For non-customers (such as newsletter subscribers), we obtain explicit consent before sending marketing communications.
For SMS marketing, we obtain explicit consent from all recipients, regardless of customer status, in compliance with TCPA requirements.
11.3 Managing Your Preferences
You can manage your communication preferences through:
Preference Center: Access via your account settings to choose which communications you receive
Unsubscribe Links: Click the unsubscribe link in any marketing email
Contact Us: Email privacy@rxpt.us to update your preferences
Please note that opting out of marketing communications does not affect transactional communications necessary for your account operation.
11.4 SMS Communications
By creating an account or providing contact information or signing up for newsletter, you provide your consent to receive SMS marketing updates and opt-in for SMS communication related to marketing updates, setup instructions, and transactional system alerts from Rexpt based on the location of information submission. You may receive:
Marketing updates
Setup Instructions
Demo links
Transactional system alerts
Service notifications and alerts
Promotional offers
Message and data rates may apply. Message frequency varies. To out-out of SMS marketing, Reply STOP or contact us at privacy@rxpt.us
12. Children's Privacy
12.1 Age Requirement
Our Platform is not intended for use by anyone under the age of eighteen (18). We do not knowingly collect personal information from children under 18. If you are under 18, please do not create an account or provide any personal information to us.
12.2 Incidental Collection
We recognize that minors may incidentally call phone numbers connected to our Platform. In such cases, their voice may be recorded as part of normal call handling.
12.3 Parental Rights
If you are a parent or guardian and believe your child's information has been collected through our Platform (including through a call recording), you may request deletion of that information by contacting us at privacy@rxpt.us. We will take reasonable steps to delete the information upon verification of your relationship to the child.
12.4 Discovery of Minor Data
If we discover that we have inadvertently collected personal information from a child under 18 (other than through normal call handling for our business customers), we will take steps to delete that information promptly.
13. Third-Party Links and Services
13.1 External Links
Our Platform may contain links to third-party websites, applications, or services. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access.
13.2 Integrated Services
When you connect third-party services to your Rexpt account (such as Google Calendar or CRM systems), those services' privacy policies govern their collection and use of your data. We are not responsible for the privacy practices of integrated third-party services.This does not limit our own obligations for data we receive through those integrations. Where we access Google user data through Google APIs, our handling of that data is governed by Section 16 of this policy.
13.3 Social Media
Our website may include social media features (such as share buttons). These features may collect your IP address and set cookies to function properly. Your interactions with these features are governed by the privacy policies of the respective social media companies.
14. Changes to This Privacy Policy
14.1 Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors.
14.2 Notification of Changes
For material changes to this Privacy Policy, we will:
Send an email notification to registered users
Update the "Last Updated" date at the top of this policy
Post the updated policy on our website
We encourage you to review this Privacy Policy periodically for any changes.
14.3 Continued Use
Your continued use of our Platform after we post changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you should discontinue use of the Platform and delete your account.
15.Google API Services and Data Use
15.1 Google Data We Access
When you choose to connect your Google account to Rxpt, and only after you grant consent on Google's OAuth consent screen, we access the following: Google Calendar (scopes: .../auth/calendar and .../auth/calendar.events) — your calendar list, calendar settings and events. We use this to create a dedicated Rxpt booking calendar in your account, to read your existing busy times so that we never double-book you, and to create, update and cancel appointment events on your behalf when your AI receptionist takes a booking. Google Contacts, read-only (scope: .../auth/contacts.readonly) — names, email addresses, phone numbers and organisation names only. We use this to recognise returning customers by their caller ID, greet them by name, and pre-fill their details into a booking. We never create, edit or delete anything in your Google Contacts.
15.2 Limited Use Commitments
We use Google user data solely to provide and improve the user-facing scheduling and caller-recognition features described above.
We do not sell Google user data.
We do not transfer Google user data to third parties except as necessary to provide those features, for security purposes, or to comply with applicable law.
We do not use Google user data for advertising, remarketing or audience targeting of any kind. The advertising and analytics services described in Section 5.2 of this policy apply only to visitors of our marketing website, and never to data obtained from Google APIs.
We do not use Google user data to train generalised artificial intelligence or machine learning models.
We do not allow humans to read Google user data, except with your explicit consent for a specific purpose, for security purposes such as investigating abuse, to comply with applicable law, or where the data has been aggregated and anonymised.
15.3 Storage, Retention and Deletion
OAuth tokens and any imported Google Contacts data are encrypted at rest and are deleted immediately when you disconnect the Google integration from Rxpt Settings, when you delete your Rxpt account, or on written request to support@rxpt.us. Disconnecting also removes the booking calendar that Rxpt created in your account. You can additionally revoke Rxpt's access at any time at https://myaccount.google.com/permissions.
15.4 Limited Use Compliance Statement
The use of raw or derived user data received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.
15.5 Your Control
The Google integration is entirely optional. You can use Rxpt without connecting a Google account, and the Google Contacts import is a separate, explicit opt-in that is not required in order to use Rxpt's scheduling features.
16. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Privacy Inquiries:Email: privacy@rxpt.us
General Inquiries:Email: support@rxpt.us
Mailing Address:
Rexpt Corp.
c/o Gust Delaware, Inc.
16192 Coastal Highway
Lewes, Delaware 19958
United States
EU/UK Representative:
Ricardo Ramos
Email: privacy@rxpt.us
Address: Calle de Torquemada 28, 3D, 28043, Madrid, Spain
We aim to respond to all privacy inquiries within thirty (30) days.