Privacy Policy

Effective Date: 2026-04-19

Version: 0.1.1

Key Information

RexLink provides an AI-powered outbound voice calling platform. We collect information from our customers (the businesses using our platform) and process information about their prospects on their behalf. This policy covers both audiences.

1. Who We Are

RexLink ("we," "us") is the data controller for customer account information and the data processor for prospect information uploaded by customers. Contact: privacy@rexlink.com.

2. Data We Collect

2.1 From customers

Account information: name, email, company, password hash
Payment information (via our payment processor — we do not store full card numbers)
Usage and technical data: IP address, user agent, feature usage events

2.2 On behalf of customers (prospect data)

Phone numbers, names, and property details uploaded by customers
Call recordings, transcripts, and AI-generated analyses of calls
Consent records (prior express written consent evidence)

2.3 Cookies

See our Cookie Policy.

3. Why We Use Your Data

Purpose	Legal Basis (GDPR)
Deliver the Service	Contract performance
Comply with legal obligations (TCPA records, tax)	Legal obligation
Security and fraud prevention	Legitimate interest
Product improvement (aggregate only, not model training on customer data)	Legitimate interest
Marketing to customers (with opt-in)	Consent

4. How We Share Your Data

Subprocessors: see our published subprocessor list at /legal/subprocessors. Changes are notified at least 30 days in advance to subscribers.
Business transfers: in a merger or acquisition.
Legal process: when required by law.
Never for model training: we do not sell or share customer data for machine-learning training.

5. International Transfers

For EU/UK data, we rely on the 2021 EU Standard Contractual Clauses and the UK IDTA. US transfers rely on the EU-US Data Privacy Framework where applicable.

6. Retention

Consent records: 5 years
Call recordings and transcripts: 5 years (Telemarketing Sales Rule)
Account data: duration of your subscription + 5 years
Customer deletion requests honored within 45 days per state privacy law.

7. Your Rights

7.1 US state rights (CCPA, VCDPA, CPA, CTDPA, TDPSA, and others)

You may request to know, delete, correct, opt out of sale/sharing, limit use of sensitive information, or receive a portable copy of your personal information. Submit requests at /privacy/request.

7.2 EU/UK rights (GDPR / UK GDPR)

You have the rights of access, rectification, erasure, restriction, portability, and objection. You may lodge a complaint with your local supervisory authority.

7.3 Universal Opt-Out (GPC)

We honor Global Privacy Control signals for visitors in California, Colorado, Connecticut, Delaware, Montana, Nebraska, New Hampshire, New Jersey, Oregon, and Texas.

8. Do Not Sell or Share My Personal Information

California residents may opt out via the footer link on any RexLink page. We do not sell personal information for monetary consideration.

9. Sensitive Personal Information

Call recordings may contain sensitive personal information. Use is limited to delivering the Service. You may request to limit the use of sensitive personal information.

10. Children's Privacy

RexLink is not directed to children under 13. If we learn we have collected personal information from a child under 13, we will delete it immediately and notify the parent or guardian where applicable.

11. California Supplemental Notice (CalOPPA)

Category of personal information collected: identifiers, commercial information, internet activity, audio recordings, professional information, inferences.

12. Cookies

See our Cookie Policy.

13. Changes to This Policy

Material changes require in-app re-acceptance. Non-material changes published to the legal changelog with at least 30 days' notice.

14. Contact

privacy@rexlink.com

Document version v0.1.1 — effective 4/19/2026 — integrity verified (SHA-256 matches published hash).