Skip to main content

Privacy Policy

Introduction

    Rexpt Corp. ("Rexpt," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (rxpt.us), use our Voice AI platform, or interact with us in any other way.

    Please read this Privacy Policy carefully. By accessing or using our Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our Platform.

    This Privacy Policy applies to:

  • Our website at rxpt.us and related subdomains
  • Our Voice AI platform and services
  • Our mobile applications
  • Our communications with you, including email, SMS, and phone
  • Our interactions with you at events or through other channels

Table of Contents

1. Information We Collect

We collect different types of information depending on how you interact with us. This section explains what information we collect, from whom, and how.

1.1 Information You Provide to Us

Account Information

When you create an account, we collect:

  • Name (first and last)
  • Email address
  • Phone number
  • Company/business name
  • Business address
  • Industry type
  • Password or authentication credentials (if applicable)

Billing Information

When you subscribe to our services, we collect:

  • Payment method details (processed by Stripe; we do not store full card numbers)
  • Billing address
  • Tax identification numbers (where required)

Knowledge Base Content

When you configure your AI Agent, you may provide:

  • Business information and descriptions
  • Products and services details
  • Frequently asked questions and answers
  • Uploaded documents (PDFs, spreadsheets, etc.)
  • Website URLs for content extraction

Communications

When you contact us, we collect:

  • Support ticket content and correspondence
  • Feedback and survey responses
  • Email and chat communications

Partner Information

If you join our Partner Program, we additionally collect:

  • Tax information for commission payments
  • Payout preferences and bank details
  • Marketing materials you submit

Job Applicant Information

If you apply for a job, we collect:

  • Resume/CV and cover letter
  • Employment history
  • Education background
  • References

1.2 Information Collected Automatically

Device and Usage Information

When you access our Platform, we automatically collect:

  • IP address and approximate location
  • Browser type and version
  • Operating system
  • Device type and identifiers
  • Pages visited and features used
  • Time spent on pages
  • Referring website or source
  • Click patterns and navigation paths

Cookies and Tracking Technologies

We use cookies, pixels, and similar technologies to collect information. For detailed information about our use of cookies, please see our Cookie Policy.

1.3 Information from Third Parties

We may receive information about you from:

  • Single Sign-On providers (Google, Apple, Facebook, Microsoft) when you choose to authenticate through them
  • Google Places API when extracting business information
  • Payment processors regarding transaction status
  • Partners who refer you to our Platform
  • Publicly available sources for business verification

1.4 End User (Caller) Information

When individuals call phone numbers connected to our Platform, we collect:

  • Caller phone number (Caller ID)
  • Call date, time, and duration
  • Voice recordings of the conversation
  • Transcripts generated from the recording
  • AI-generated call summaries
  • Sentiment and intent analysis
  • Any information the caller voluntarily provides during the call

Important Notice for Callers:

If you are calling a phone number that uses Rexpt's AI Agent, you are interacting with our customer's business. The business (our customer) is the data controller for your call data, and we process this data on their behalf. Please refer to that business's privacy policy for information about how they handle your data.

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Providing and Improving Our Services

  • Creating and managing your account
  • Processing your subscription and payments
  • Providing the Voice AI platform functionality
  • Handling and transcribing calls through your AI Agent
  • Integrating with third-party services you connect
  • Providing customer support
  • Analyzing usage to improve our services
  • Developing new features and products

2.2 Communications

  • Sending transactional emails (account confirmations, billing receipts, security alerts)
  • Sending service-related notifications (feature updates, maintenance notices)
  • Sending marketing communications (with your consent or as permitted by law)
  • Sending newsletters and blog updates
  • Sending promotional offers and festive greetings
  • Sending SMS notifications and updates

2.3 Security and Fraud Prevention

  • Detecting and preventing fraudulent activity
  • Monitoring for security threats
  • Enforcing our Terms of Use

3. Legal Basis for Processing (EEA/UK Users)

If you are located in the European Economic Area (EEA) or United Kingdom (UK), we process your personal data based on the following legal grounds:

Where we rely on legitimate interests, we have conducted a balancing test to ensure our interests do not override your fundamental rights and freedoms. You may contact us for more information about this assessment.

4. How We Share Your Information

We do not sell or rent your personal information to third parties. Text messaging originator opt-in data and consent will not be shared with any third parties, affiliates, or partners for marketing or promotional purposes. We may share your information in the following circumstances:

4.1 Service Providers (Sub-processors)

We share information with third-party service providers who perform services on our behalf, including:

  • Cloud hosting and infrastructure providers
  • Payment processors
  • Email and SMS delivery services
  • Analytics providers
  • Customer support tools
  • AI and voice processing services

These providers are contractually bound to protect your information and may only use it for the purposes we specify.

4.2 Business Customers

For End Users (callers), we share call data with the business customer whose AI Agent handled your call. This includes call recordings, transcripts, and related analytics. The business customer is the data controller for this information.

4.3 Integrated Third-Party Services

When you connect third-party services to your account (such as Google Calendar, CRM systems, or POS systems), we share relevant data with those services as necessary to provide the integration functionality.

4.4 Partners

If you were referred by a partner, we may share limited information (such as your account status) with that partner for attribution and commission purposes.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your browsing activities. This section provides a summary; please see our separate Cookie Policy for complete details.

5.1 Types of Cookies We Use

Cookie TypePurposeExamples
Strictly NecessaryEssential for website functionalitySession cookies, security cookies
Performance/AnalyticsUnderstand how visitors use our siteGoogle Analytics, Mixpanel
FunctionalityRemember your preferencesLanguage settings, login state
Advertising/TargetingDeliver relevant ads, measure campaignsGoogle Ads, Facebook Pixel, LinkedIn Insight
Session RecordingUnderstand user behavior and improve UXHotjar, Microsoft Clarity

5.2 Third-Party Tracking

We use the following third-party services that may place cookies or collect information:

  • Google Analytics (GA4) - Website analytics
  • Mixpanel - Product analytics
  • Google Ads - Advertising and remarketing
  • Facebook Pixel - Advertising and conversion tracking
  • LinkedIn Insight Tag - B2B advertising
  • Hotjar - Session recording and heatmaps
  • Microsoft Clarity - Session recording and analytics

5.3 Cookie Consent

6. Data Retention

We retain your information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law.

6.1 Account Deletion

When you delete your account or request deletion, we will delete your personal data within seven (7) days, except for:

  • Data we are required to retain by law (such as billing records)
  • Data necessary to establish, exercise, or defend legal claims
  • Aggregated, anonymized data that does not identify you

6.2 End User Data

Call recordings and transcripts for End Users (callers) are automatically deleted after 90 days. Our business customers may request earlier deletion of their call data.

7. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information.

7.1 Rights for All Users

All users may:

  • Access their account information through the Platform
  • Update or correct their account information
  • Delete their account
  • Unsubscribe from marketing communications
  • Contact us with privacy questions or concerns

7.2 Rights for EEA/UK Residents (GDPR)

If you are located in the EEA or UK, you have the following additional rights:

  • Right of Access: Request a copy of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your data ("right to be forgotten")
  • Right to Restriction: Request limitation of processing
  • Right to Data Portability: Receive your data in a machine-readable format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
  • Right to Lodge a Complaint: File a complaint with your local supervisory authority

7.3 Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights:

8. International Data Transfers

8.1 Data Location

Your personal data is primarily stored and processed in the United States. By using our Platform, you acknowledge that your data will be transferred to and processed in the United States.

8.2 Transfer Mechanisms

For transfers of personal data from the EEA or UK to the United States, we rely on:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • UK International Data Transfer Addendum for UK transfers
  • Supplementary measures including encryption and access controls

8.3 EU/UK Representative

For users in the European Union and United Kingdom, we have appointed a representative:

EU/UK Representative:

Name: Ricardo Ramos

Email: ric@rxpt.us

Address: [Address to be added]

You may contact our representative for any matters relating to GDPR compliance.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

9.1 Security Measures

Our security measures include:

  • Encryption of data in transit (TLS 1.3)
  • Encryption of data at rest (AES-256)
  • Access controls and authentication requirements
  • Regular security assessments and penetration testing
  • Employee training on data protection
  • Incident response procedures
  • Secure software development practices

9.2 Your Responsibilities

You are responsible for:

  • Keeping your login credentials confidential
  • Using strong, unique passwords
  • Logging out after each session on shared devices
  • Notifying us immediately of any unauthorized access

9.3 Security Incidents

Despite our efforts, no method of transmission over the Internet or electronic storage is 100% secure. If a security breach occurs that affects your personal information, we will notify you as described in Section 10.

10. Data Breach Notification

10.1 Our Commitment

In the event of a data breach that affects your personal information, we are committed to notifying affected individuals promptly and transparently.

10.2 Notification to Account Holders

If a breach affects your Rexpt account, we will notify you via:

  • Email to your registered email address
  • SMS to your registered phone number

The notification will include information about the nature of the breach, the data affected, and steps you can take to protect yourself.

10.3 Notification for End Users (Callers)

If a breach affects call recordings or other End User data, we will notify our business customer (the data controller) within 72 hours. The business customer is responsible for determining whether and how to notify affected callers, in accordance with applicable law.

10.4 Public Disclosure

For significant breaches, we may post notifications on our website or status page to ensure broad awareness.

10.5 Regulatory Notification

Where required by law, we will notify relevant supervisory authorities within the required timeframes (e.g., 72 hours under GDPR).

11. Marketing Communications

11.1 Types of Communications

We may send you the following types of communications:

Transactional (Cannot Opt-Out):

  • Account confirmations and security alerts
  • Billing receipts and payment notifications
  • Service disruption notices
  • Legal and policy updates

Service-Related:

  • Feature announcements and product updates
  • Tips and best practices
  • Usage summaries and reports

Marketing:

  • Newsletters and blog updates
  • Promotional offers and discounts
  • Festive greetings
  • Partner and event announcements
  • SMS marketing messages

11.2 Marketing Consent

For existing customers, we may send marketing communications about similar products and services based on our legitimate interests ("soft opt-in"), provided you have the opportunity to opt-out.

For non-customers (such as newsletter subscribers), we obtain explicit consent before sending marketing communications.

For SMS marketing, we obtain explicit consent from all recipients, regardless of customer status, in compliance with TCPA requirements.

12. Children's Privacy

12.1 Age Requirement

Our Platform is not intended for use by anyone under the age of eighteen (18). We do not knowingly collect personal information from children under 18. If you are under 18, please do not create an account or provide any personal information to us.

12.2 Incidental Collection

We recognize that minors may incidentally call phone numbers connected to our Platform. In such cases, their voice may be recorded as part of normal call handling.

12.3 Parental Rights

If you are a parent or guardian and believe your child's information has been collected through our Platform (including through a call recording), you may request deletion of that information by contacting us at privacy@rxpt.us. We will take reasonable steps to delete the information upon verification of your relationship to the child.

12.4 Discovery of Minor Data

If we discover that we have inadvertently collected personal information from a child under 18 (other than through normal call handling for our business customers), we will take steps to delete that information promptly.

13. Third-Party Links and Services

13.1 External Links

Our Platform may contain links to third-party websites, applications, or services. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access.

13.2 Integrated Services

When you connect third-party services to your Rexpt account (such as Google Calendar or CRM systems), those services' privacy policies govern their collection and use of your data. We are not responsible for the privacy practices of integrated third-party services.

13.3 Social Media

Our website may include social media features (such as share buttons). These features may collect your IP address and set cookies to function properly. Your interactions with these features are governed by the privacy policies of the respective social media companies.

14. Changes to This Privacy Policy

14.1 Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors.

14.2 Notification of Changes

For material changes to this Privacy Policy, we will:

  • Send an email notification to registered users
  • Update the "Last Updated" date at the top of this policy
  • Post the updated policy on our website

We encourage you to review this Privacy Policy periodically for any changes.

14.3 Continued Use

Your continued use of our Platform after we post changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you should discontinue use of the Platform and delete your account.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Privacy Inquiries:Email: privacy@rxpt.us

General Inquiries:Email: support@rxpt.us

Mailing Address:

Rexpt Corp.

c/o Gust Delaware, Inc.

16192 Coastal Highway

Lewes, Delaware 19958

United States

EU/UK Representative:

Ricardo Ramos

Email: privacy@rxpt.us

Address: Calle de Torquemada 28, 3D, 28043, Madrid, Spain

We aim to respond to all privacy inquiries within thirty (30) days.

  • Protecting our rights and the rights of others

2.4 Legal and Compliance

  • Complying with legal obligations
  • Responding to legal requests and court orders
  • Establishing, exercising, or defending legal claims

2.5 Analytics and Research

  • Understanding how users interact with our Platform
  • Measuring the effectiveness of our marketing
  • Conducting research and analysis
  • Creating aggregated, anonymized insights and benchmarks

2.6 Partner Program

  • Tracking referrals and attributions
  • Calculating and processing commission payments
  • Communicating partner program updates

4.5 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests, including:

  • Court orders and subpoenas
  • Government or regulatory agency requests
  • Law enforcement requests

4.6 Business Transfers

If Rexpt is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

4.7 With Your Consent

We may share your information for other purposes with your explicit consent.

4.8 Aggregated and Anonymized Data

We may share aggregated, anonymized data that does not identify you personally. This data may be used for industry analysis, benchmarking, marketing, and other business purposes. For example, we may publish statistics about call volumes or AI performance metrics.

When you first visit our website, you will be presented with a cookie consent banner that allows you to:
  • Accept all cookies
  • Reject non-essential cookies
  • Customize your cookie preferences by category

You can change your cookie preferences at any time by clicking the "Cookie Settings" link in our website footer.

5.4 Do Not Track

Some browsers have a "Do Not Track" feature. Our website does not currently respond to Do Not Track signals. However, you can manage your tracking preferences through our cookie consent tool.

5.5 Partner Attribution

We use first-party cookies to track partner referrals for our affiliate program. These cookies have a 60-day retention period and help us attribute sign-ups to the correct partner.

  • Right to Know: Request information about the categories and specific pieces of personal information we collect
  • Right to Delete: Request deletion of your personal information
  • Right to Correct: Request correction of inaccurate information
  • Right to Opt-Out of Sale: We do not sell personal information, so this right does not apply
  • Right to Non-Discrimination: We will not discriminate against you for exercising your rights

7.4 How to Exercise Your Rights

To exercise any of your privacy rights, please contact us at:

Email: privacy@rxpt.us

Subject: Privacy Rights Request

Please include:

  • Your full name
  • Email address associated with your account (if applicable)
  • Description of your request
  • Any information that helps us verify your identity

We will respond to your request within thirty (30) days. If we need additional time, we will notify you of the reason and extension period (up to an additional 60 days for complex requests).

7.5 Identity Verification

To protect your privacy and security, we may require verification of your identity before processing your request. For sensitive requests (such as data deletion or access to detailed records), we may require formal identification verification.

7.6 Authorized Agents

You may designate an authorized agent to make requests on your behalf. We will require verification of the agent's authorization and your identity.

11.3 Managing Your Preferences

You can manage your communication preferences through:

  • Preference Center: Access via your account settings to choose which communications you receive
  • Unsubscribe Links: Click the unsubscribe link in any marketing email
  • Contact Us: Email privacy@rxpt.us to update your preferences

Please note that opting out of marketing communications does not affect transactional communications necessary for your account operation.

11.4 SMS Communications

By creating an account or providing contact information or signing up for newsletter, you provide your consent to receive SMS marketing updates and opt-in for SMS communication related to marketing updates, setup instructions, and transactional system alerts from Rexpt based on the location of information submission. You may receive:

  • Marketing updates
  • Setup Instructions
  • Demo links
  • Transactional system alerts
  • Service notifications and alerts
  • Promotional offers

Message and data rates may apply. Message frequency varies. To out-out of SMS marketing, Reply STOP or contact us at privacy@rxpt.us