Privacy policy.
Effective Date: January 2, 2024
Last Updated: [Current Date]
Welcome to the Rebel Body Butters & More. website (“Website”) operated by Rebel Body Products, LLC (“we,” “us,” “our”). By accessing and using the Website, you agree to comply with and be bound by these Terms of Use. If you do not agree with these terms, please do not use the Website.
1. INTRODUCTION
Rebel Body Butters & More uses an AI-powered communication platform that enables you to interact with artificial intelligence services through SMS text messages, MMS (multimedia messages), and voice calls. This service uses toll-free and other phone numbers provided through Twilio, a third-party telecommunications service provider, to facilitate these communications.
2. INFORMATION WE COLLECT
2.1 Information You Provide Directly
Phone Number: We collect your phone number when you register for our service or when your phone number is whitelisted by an administrator. Phone numbers are required for SMS, MMS, and voice call functionality.
User Profile Information: Name, email address, zip code, and other profile information you provide during account setup or profile configuration.
Messages and Content:
All SMS text messages you send and receive through our service
MMS attachments including images, audio files, documents, and other media
Voice call recordings and transcripts (when applicable)
Commands, preferences, and settings you configure
Authentication Information:
Google OAuth account information (when you sign in with Google)
Phone number verification codes and authentication tokens
Household Information: If you participate in household features, we collect information about household membership, shared conversations, and privacy preferences.
2.2 Automatically Collected Information
Call Logs and Voice Data:
Voice call duration, call status, timestamps
Speech-to-text transcripts of your voice conversations
Call metadata including originating and destination phone numbers
Call quality metrics and technical data
Message Data:
SMS/MMS delivery status and timestamps
Message routing information
Provider selection and usage patterns
Usage Data:
AI provider usage statistics (OpenAI, Anthropic, Perplexity, Mistral)
Token consumption, costs, latency metrics
Error logs and system performance data
Conversation history and context
Device and Technical Information:
Phone number, carrier information, and device capabilities
IP addresses, user agents, request timestamps
System logs and technical diagnostics
Location Data:
Location information you provide or that is inferred from your messages (when using location-aware features)
Geographic data used for location-based services
2.3 Information from Third-Party Services
SMS/MMS delivery status and telephony metadata
Voice call data, call recordings (if enabled), and call transcripts
Phone number verification and carrier information
Toll-free number usage and compliance data
We transmit your messages, content, and conversation context to third-party AI providers to generate responses. These providers may process and store your data according to their own privacy policies. We do restrict certain PII from being sent to the providers to add a layer of security.
Data storage, authentication information, and file storage metadata
When you authenticate with Google OAuth, we receive basic profile information (name, email) as permitted by your Google account settings
3. HOW WE USE YOUR INFORMATION
We use the information we collect to:
Provide Core Services:
Process and route your SMS, MMS, and voice communications
Generate AI responses using third-party AI services
Manage conversations and conversation history
Enable household features and shared conversations
Store and manage files and media attachments
Service Management:
Verify phone numbers and authenticate users
Manage toll-free and other phone number configurations
Track usage, costs, and analytics for service optimization
Monitor system performance and troubleshoot issues
Enforce rate limits and prevent abuse
Communication and Support:
Send administrative information, updates, and service notifications
Provide customer support and respond to your inquiries
Send SMS notifications related to your account (you may opt out)
Legal and Compliance:
Comply with legal obligations and regulatory requirements
Comply with telecommunications regulations (TCPA, CAN-SPAM, etc.)
Enforce our terms of service
Prevent fraud, abuse, or security threats
Respond to legal requests and court orders
Service Improvement:
Improve our service, develop new features, and conduct research
Analyze usage patterns to enhance user experience
Train and improve AI response quality (with appropriate safeguards)
4. DATA SHARING AND DISCLOSURE
4.1 Third-Party AI Providers
Your messages, content, conversation history, and context are shared with third-party AI providers to generate responses. These providers have their own privacy policies and data processing practices. We recommend reviewing their privacy policies:
OpenAI: https://openai.com/policies/privacy-policy
Anthropic: https://www.anthropic.com/privacy
Perplexity: https://www.perplexity.ai/privacy
Mistral: https://mistral.ai/privacy-policy/
4.2 Telecommunications Service Providers
Twilio: We share data with Twilio, our telecommunications service provider, for:
SMS/MMS message delivery and routing
Voice call processing and management
Toll-free number provisioning and management
Phone number verification
Compliance with telecommunications regulations
Call recording and transcription services (when enabled)
Twilio's privacy policy: https://www.twilio.com/legal/privacy
4.3 Service Providers
We share data with service providers who perform services on our behalf:
For database storage, file storage, and authentication services
For infrastructure and hosting
For usage analytics and service optimization
4.4 Household Features
If you participate in household features:
Your conversations, files, and profile information may be accessible to other household members according to your privacy settings
Household administrators may have access to household member data for management purposes
You can control what information is shared through your privacy settings
4.5 Legal Requirements
We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to:
Comply with legal obligations
Protect our rights, property, or safety
Prevent fraud or abuse
Respond to government requests
Comply with telecommunications regulations
4.6 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
5. TOLL-FREE NUMBER AND TELECOMMUNICATIONS COMPLIANCE
5.1 Toll-Free Number Usage
We use toll-free numbers provided through Twilio to facilitate SMS and voice communications. By using our service, you consent to:
Receiving SMS and voice communications on toll-free numbers
The collection and processing of call and message data as described in this policy
Compliance with applicable telecommunications regulations
5.2 TCPA and SMS Consent
Opt-In: By providing your phone number and using our service, you consent to receive SMS messages from us. You may opt out at any time by replying "STOP" to any message.
Opt-Out: You can opt out of SMS communications by:
Replying "STOP" to any SMS message
Contacting us directly to request removal
Updating your account preferences
After opting out, you will receive a confirmation message, and we will stop sending you SMS messages (except for essential service-related messages).
5.3 Voice Call Consent
By using our voice call features, you consent to:
The processing of your voice calls through Twilio
Speech-to-text transcription of your voice conversations
Text-to-speech generation of AI responses
Call recording (if enabled and disclosed)
The collection of call metadata and transcripts
5.4 Call Recording
If call recording is enabled for your account:
You will be notified at the beginning of each call that the call may be recorded
Recordings are stored securely and used only for service improvement, quality assurance, and compliance purposes
You can request access to or deletion of call recordings (subject to legal retention requirements)
6. DATA SECURITY
We implement appropriate technical and organizational measures to protect your information:
Encryption:
Encryption of API keys and sensitive credentials at rest
Secure transmission using HTTPS/TLS for all data in transit
Encrypted database storage for sensitive information
Access Controls:
Authentication and authorization controls
Role-based access restrictions
Regular security audits and monitoring
Data Protection:
PII redaction capabilities for sensitive data
Secure storage in encrypted databases
Regular security assessments and vulnerability testing
Incident Response:
Security monitoring and threat detection
Incident response procedures
Regular backup and disaster recovery procedures
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
7. DATA RETENTION
We retain your information for as long as necessary to provide our services and comply with legal obligations:
SMS/MMS Conversations: Retained for 365 days, then automatically deleted (unless you request earlier deletion)
Voice Call Logs and Transcripts: Retained for 365 days, then automatically deleted (unless you request earlier deletion)
Call Recordings: Retained according to your account settings and legal requirements
User Profiles: Retained until account deletion or withdrawal of consent
Usage Logs and Analytics: Retained for service optimization and compliance purposes (may be retained longer in anonymized form)
Household Data: Retained according to household settings and until all household members delete their accounts
You may request deletion of your data at any time (see Section 9). Some data may be retained longer if required by law or for legitimate business purposes.
8. YOUR PRIVACY RIGHTS
Depending on your location, you may have the following rights:
8.1 Access and Portability
Request access to your personal data
Receive a copy of your data in a portable format
View your conversation history, call logs, and usage data
8.2 Rectification
Request correction of inaccurate or incomplete data
Update your profile information
Correct phone number or contact information
8.3 Erasure
Request deletion of your personal data
Withdraw consent for data processing
Delete your account and associated data
8.4 Restriction and Objection
Request restriction of processing
Object to certain types of data processing
Opt out of specific features or data collection
8.5 Opt-Out Rights
SMS Opt-Out: Reply "STOP" to any SMS message to opt out of SMS communications
Voice Opt-Out: Contact us to disable voice call features
Marketing Communications: Opt out of marketing communications (service-related messages may still be sent)
8.6 Household Privacy Controls
Control what information is shared with household members
Adjust privacy settings for files, conversations, and metadata
Request removal from household features
To exercise these rights, contact us using the information in Section 12.
9. DATA DELETION REQUESTS
You may request deletion of your data at any time. We will process deletion requests within 30 days, subject to:
Legal obligations requiring data retention (e.g., telecommunications regulations, court orders)
Legitimate business interests (e.g., fraud prevention, dispute resolution)
Ongoing legal proceedings
Technical limitations (some data may be retained in backups for a limited period)
To request data deletion:
Contact us using the information in Section 12
Specify which data you wish to delete
Provide verification of your identity
After deletion, some anonymized or aggregated data may be retained for analytics and service improvement purposes.
10. CHILDREN'S PRIVACY
Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will take steps to delete such information.
11. INTERNATIONAL DATA TRANSFERS
Your information may be transferred to and processed in countries outside your country of residence, including:
United States: Where our primary service providers are located
Other countries: Where AI providers operate their services
These countries may have different data protection laws than your country of residence. We ensure appropriate safeguards are in place for international transfers, including:
Standard contractual clauses
Adequacy decisions where applicable
Compliance with applicable data protection regulations (GDPR, CCPA, etc.)
12. CONTACT US
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about our data practices, please contact us:
Email: [Your Contact Email]
Phone: [Your Contact Phone]
Mailing Address: [Your Mailing Address]
For toll-free number inquiries or telecommunications compliance questions, please contact us using the above information.
13. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
Posting the new Privacy Policy on our website with an updated "Last Updated" date
Sending you an email notification (if you have provided an email)
Sending you an SMS notification for significant changes (if you have opted in to SMS)
Displaying a prominent notice on our service
Your continued use of our service after changes become effective constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, you should stop using the service and contact us to delete your account.
14. CONSENT
By using our service, you consent to:
The collection, use, and disclosure of your information as described in this Privacy Policy
Receiving SMS and voice communications on toll-free and other phone numbers
The processing of your data by third-party AI providers and service providers
The sharing of information within household features (according to your privacy settings)
Compliance with applicable telecommunications regulations
You may withdraw your consent at any time by:
Opting out of SMS communications (reply "STOP")
Disabling voice call features
Deleting your account
Contacting us to request data deletion
15. ADDITIONAL INFORMATION
15.1 California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
Right to know what personal information is collected
Right to know if personal information is sold or disclosed
Right to opt out of the sale of personal information (we do not sell personal information)
Right to non-discrimination for exercising your privacy rights
15.2 European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):
Right to access, rectify, or erase your personal data
Right to restrict or object to processing
Right to data portability
Right to lodge a complaint with a supervisory authority
15.3 Do Not Track
Our service does not respond to "Do Not Track" signals from browsers. We do not track users across third-party websites for advertising purposes.
By using Rebel Body Products, LLC., you agree to the terms outlined in this Privacy Policy.
Rebel Body Butters & More.
