Privacy Policy

Introduction

This Rebolt Privacy Statement (“Statement”) describes how Tieki, Inc. (“Rebolt” or “we” or “us”) collect, use, process, and share the information of users of our Sites and Services (“you” or “your”), your rights and choices with respect to your information, and how you can contact us if you have any questions or concerns.

This policy should be read in conjunction with our Terms of Service ("Terms"), which contain additional important information about how we handle your data and content.

Scope of this Privacy Policy

This Privacy Policy applies to Rebolt's platform that enable Customers and their Authorized Users to build, automate, and deploy internal tools (individually and collectively, the "Services"); rebolt.ai (the "Website"); and other interactions you may have with Rebolt.

We are committed to protecting your personal information and your right to privacy. If you have any questions about this policy or our practices, please contact us at (415)-426-0664

In this Privacy Policy, "you" and "your" refer to the person or entity visiting our Website or using our Services. If you purchase our Services, you are referred to as a "Customer." If you are authorized by a Customer to access and use our Services, you are an "Authorized User."

Where Rebolt collects information that is associated with an identified or identifiable individual and protected as personal data under applicable data protection laws, it is referred to as "Personal Data." Personal Data that has been de-identified or aggregated to the extent that it is no longer reasonably associated with an identified or identifiable natural person may be used by Rebolt for any lawful purpose.

Customers can design and build customized applications, workflows, and processes using the Services (“Custom Apps”). In addition, certain databases, applications, and software products not developed or provided by Rebolt (“Non-Rebolt Products”) may interoperate with our Services. These Non-Rebolt Products are offered by Customers or third parties independently of Rebolt.

Third-Party Services

This Privacy Policy applies only to Rebolt's Services and Website. It does not cover Non-Rebolt Products, third-party websites, services, or applications (“Third-Party Services”), even if they are accessible through our platform. Such Third-Party Services operate under their own terms of use and privacy policies.

Where applicable, a separate master subscription agreement (the “Subscription Agreement”) may govern the Customer's access to and use of the Services, including the processing of any data or content submitted to a Custom App by an Authorized User (“Customer Data”), excluding Non-Rebolt Products and external services. The Customer — such as your employer or the organization that subscribed to Rebolt — controls its use of the Services and the associated Customer Data. If you have questions about specific configurations, data practices, or privacy settings, please contact the Customer whose service you use.

Information We Collect

Account information

We collect information that you or our Customers (such as your employer) provide when creating and managing accounts on the Services. This information helps us operate, maintain, and deliver the full functionality of our platform. Information collected may include:

Name and email address
Company name and contact details
Account credentials and preferences
Billing and payment information for paid plans
Organizational roles and permissions (e.g., administrators, users, contributors)
Optional profile information, such as phone number or additional contact methods

We may also collect information you post or submit during your use of the Services, such as settings, project data, and configuration details.

For detailed information about account management and your responsibilities regarding account information, please see the "User accounts and content" section of our Terms.

Service Usage Data

We collect information related to how you and other Authorized Users interact with the Services. This includes:

User-generated content, such as workflows, applications, prompts, and configuration data
Activity and usage data, including device information, IP address, browser type, and interaction logs
Session data, cookies, and similar tracking technologies
Technical logs, such as error reports, crash logs, and debugging information

The ownership and usage rights of generated code and content are detailed in the "Intellectual property rights" section of our Terms.

Automatically Collected Information

When you use our Services, we automatically collect certain technical and usage information to help us operate and improve the platform. This information may include:

IP address
Browser type and version
Device type, model, and identifiers
Operating system and version
Usage information and interaction data (e.g., features used, time spent)
Access timestamps (e.g., login times, session durations)
Pages and content viewed within the platform

We collect this information to understand how users interact with the Services, to maintain platform security and reliability, and to improve overall performance and user experience.

Sensitive Personal Information

Rebolt does not knowingly collect sensitive personal information as defined under applicable data protection laws (such as information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, health data, or biometric data).

Analytics and Tracking

We use analytics and tracking tools to better understand how users interact with our Services and to help us improve the platform. These tools collect information such as device type, browser information, pages visited, time spent on pages, and user interactions.

We use the following analytics and tracking tools:

Posthog
- We use Posthog for product analytics and user behavior tracking
- For details about Posthog´s data handling, please see their Privacy policy
Google Analytics and related services
- We use Google Analytics to understand website traffic and usage
- You can opt out using Google Analytics Opt-out Browser Add-on
- For more information, visit Google's Privacy & Terms

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our platform. Cookies help us:

Maintain secure sessions
Remember user preferences and settings
Analyze how the Services are accessed and used
Improve functionality and performance of the Services

You can manage your cookie preferences through your browser settings.

How we use your information

We use the information we collect to operate, maintain, and improve the Services, to provide customer support, and to comply with legal obligations. Specifically, we use your information for the following purposes:

Service Delivery and Improvement

To provide, operate, and maintain the Services, including Custom Apps and workflows.
To enable authorized account access, roles, and permissions management.
To personalize your experience and remember user settings and preferences.
To improve platform functionality, performance, and reliability.
To analyze feature usage and user interactions for product development.

Customer Support and Communication

To provide technical support and respond to inquiries.
To send administrative communications such as service notifications, account updates, and security alerts.
To process billing, payments, and manage subscription accounts.
To conduct user feedback surveys to improve the Services.

Security and Risk Prevention

To detect, investigate, and prevent fraudulent transactions and other illegal activities.
To monitor, audit, and secure the platform against unauthorized access and abuse.
To conduct debugging, troubleshooting, and service diagnostics.
To maintain logs and perform system backups to protect against data loss.

Compliance and Legal Requirements

To comply with applicable laws, regulations, and valid legal processes.
To enforce our Terms of Service, Subscription Agreements, and other policies.
To protect the rights, safety, and property of Rebolt, our Customers, Authorized Users, and the public.

Collaboration and Sharing Features

To enable collaboration among Authorized Users within an organization.
To manage Custom App sharing settings, project visibility, and administrative controls as configured by Customers.

Third-Party Services and Integrations

To facilitate integrations with third-party tools and services at the Customer’s or Authorized User’s direction.
Information shared with Third-Party Services is subject to their own terms and privacy practices.

Events, Marketing, and Promotions

To communicate about upcoming webinars, events, or product updates (only if permitted under your communication preferences).
Where required by applicable laws, such as the GDPR, we obtain your explicit consent before sending you marketing communications.
You may withdraw your consent or opt out of receiving marketing emails from us at any time by following the unsubscribe link included in the emails or by contacting us

You have certain rights regarding your personal data, including the right to access, correct, or delete your personal information.

Data Sharing and Processing

We only share information as necessary to operate, maintain, and improve the Services, and as otherwise described in this Privacy Policy.

Third-Party Service Providers

We may share information with trusted third-party service providers that support the delivery of our Services. These providers may assist with services such as:

Payment processing
Data hosting and storage
Analytics and usage tracking
Customer support tools

We require all service providers to maintain the confidentiality and security of the information they process on our behalf and to use it only for the purposes specified by Rebolt.

Customer’s Instructions and Authorized Users

We process and share information according to the Customer’s (e.g., your employer’s) instructions. This includes enabling Authorized Users to collaborate on Custom Apps, configure user roles, share project information internally, or integrate with third-party services as permitted by the Customer.

Customers control the sharing and disclosure of any Customer Data within their Rebolt instance, including who can view, modify, or export information.

Third-Party Integrations

At the Customer’s or Authorized User’s request, Rebolt may enable integrations with third-party services ("Third-Party Services"). When you connect to these services, certain information may be shared according to the third party’s own terms and privacy policies. Rebolt does not control and is not responsible for the privacy practices of Third-Party Services.

Public Sharing

If a Customer or Authorized User chooses to publish or share a Custom App publicly, any information included in the public version may become accessible to others. Content shared publicly may still be cached or archived by third parties even after deletion.

Enterprise Plan Protections

Enterprise Customers may benefit from additional data protection terms, including restrictions on how Customer Data is processed, training exclusions for AI models, and enhanced confidentiality commitments. Please see the "Enterprise Plan Exceptions" section of our Terms for more information.

Affiliates and Business Changes

We may share information with corporate affiliates (companies owned or controlled by Rebolt) consistent with this Privacy Policy.

In the event of a merger, acquisition, reorganization, or sale of assets, information may be transferred to the involved parties to complete the transaction.

Aggregated or De-Identified Information

We may use or share aggregated or de-identified information (information that cannot reasonably identify you) for any purpose, including business analysis, research, or product development.

Legal Requirements and Protection

We may disclose information if required to:

Comply with a legal obligation, subpoena, court order, or government request
Enforce our Terms of Service and other agreements
Protect Rebolt’s rights, property, or safety, or that of our Customers, Authorized Users, or the public
Detect, prevent, or otherwise address fraud, security, or technical issues

With Your Consent

We may share information with third parties when we have obtained your explicit consent to do so.

International Data Transfers

We may transfer your Personal Data to countries outside of your country of residence, including the United States, to support the operation of our Services. Where required by applicable law, we ensure appropriate safeguards are in place, such as the use of European Commission Standard Contractual Clauses (SCCs) for international data transfers In addition, Rebolt assesses international transfers and may implement supplementary safeguards where necessary, in accordance with applicable data protection laws.

Liability Protection

We implement industry-standard technical and organizational measures to protect the privacy and security of user content within our Services. However, no system is completely secure, and we cannot guarantee absolute protection against unauthorized access or misuse.

Users are responsible for maintaining the confidentiality of their account credentials and for all activities that occur under their account, whether authorized or not. Rebolt disclaims any liability for damages, loss of profits, or other harm resulting from unauthorized access to your content due to your actions or negligence.

Our warranty disclaimers and limitations of liability, as described in our Terms of Service, apply fully to the operation of our platform, including matters related to the privacy and security of Personal Data and Customer Data.

Security

At Rebolt, protecting your data is a top priority. We implement industry-standard technical, physical, and organizational measures to safeguard the security, confidentiality, and integrity of the information entrusted to us.

Our security practices include, but are not limited to:

Encryption of data in transit and at rest
Secure user authentication and access controls
Continuous monitoring and system auditing
Data center security standards with redundancy and failover capabilities
Regular vulnerability assessments and security reviews

Customer Data stored within our cloud-hosted Services may be temporarily cached to optimize functionality, based on Customer configurations and preferences. On-premises Services are also available

While we take strong measures to protect your information, no method of transmission over the internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee absolute protection.

We encourage Customers to configure their accounts responsibly and follow best practices for securing access credentials.

Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy, or as required by law.

We retain Personal Data for as long as necessary to provide our Services, fulfill the purposes described in this Privacy Policy, and comply with legal, regulatory, or contractual requirements. The retention period may vary depending on the type of information and the specific circumstances, but we apply criteria that respect user privacy and minimize storage where possible.

When Personal Data is no longer needed, we securely delete, anonymize, or de-identify it in accordance with applicable laws and best practices.

Legal Basis for Processing

When we process your Personal Data, we do so based on one or more of the following legal bases:

Performance of a contract: To provide and operate the Services you or your employer have requested.
Legitimate interests: To operate our Services efficiently, prevent fraud, ensure security, and improve user experience, provided these interests are not overridden by your rights.
Compliance with legal obligations: To comply with applicable laws, regulations, and lawful requests.
Consent: Where required by law, we obtain your consent before processing your Personal Data for specific purposes, such as direct marketing communications.

You have the right to withdraw your consent at any time.

Your Privacy Rights

Regardless of where you reside, you have rights related to your personal information as outlined in this Privacy Policy.

Depending on your place of residence, you may have specific rights under applicable data protection laws, including the European General Data Protection Regulation (GDPR), the United Kingdom GDPR, and the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

For residents of the European Economic Area (EEA), the United Kingdom, and Brazil (GDPR and similar laws):

You have the right to:

Access, correct, or delete your personal data
Restrict or object to our processing of your personal data
Request data portability (receive a copy of your data in a usable format)
Withdraw your consent at any time, where we rely on consent for processing

For California residents (CCPA/CPRA):

This section provides additional details about your rights under the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”).

You have the right to:

Request to know the categories and specific pieces of personal information we collect, use, and disclose
Request deletion of your personal information, subject to legal exceptions
Request correction of inaccurate personal information
Opt out of the sale or sharing of your personal information
Limit the use of sensitive personal information (where applicable)
Not be discriminated against for exercising any of your rights

Categories of personal information we may collect include:

Identifiers (such as name, email address, company information)
Commercial information (such as billing details)
Internet or electronic network activity (such as platform usage data)
Geolocation information (IP-based)
Professional or employment-related information
Inferences drawn from the above

For more information on how we collect and use personal information, please review the "Information We Collect" section above.

We may request verification of your identity before processing your request to ensure the security of your information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make material changes, we will notify you by updating the date at the top of this page, and where required, by providing additional notice through our Services or via email.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Contact Us

If you have any questions or comments about this Statement, how we collect and use your information, your choices or rights regarding such use, or wish to exercise your rights, please do not hesitate to contact us at:

Email: support@rebolt.ai

Postal Address: Tieki, Inc. 1111B S Governors Ave STE 25859, Dover, DE 19940, US