Privacy Policy

This Privacy Policy explains how Rebnal ("we", "us" or "our") handles personal information when you visit rebnal.bd, create or use a Rebnal workspace, communicate with us, or use services that refer to this Policy. The legal name used in this Policy is Rebnal.

Rebnal is a business-focused conversational AI platform being developed for customer support, reception, order confirmation, sales and related workflows. Some website experiences are illustrative previews. The availability of a preview does not mean that every described feature is active.

This Policy does not govern third-party products, websites or services that have their own privacy notices.

Depending on the services you use, we may collect:

• Account and contact information, such as your name, business email, telephone number, organization, role and login details.
• Workspace and business information, including team members, settings, business instructions, knowledge sources, integrations and support requests.
• Customer Content submitted by you or on your behalf, such as documents, prompts, messages, contact records, call metadata, transcripts and recordings when those features are enabled.
• Technical and usage information, including IP address, browser and device details, timestamps, pages viewed, diagnostic logs, security events and interaction data.
• Commercial information, such as plan, order, invoice and payment status when commercial services are offered. Any payment-data handling will be disclosed with the relevant billing service.
• Cookie and analytics information used to operate, secure and understand our website. You can control many cookies through your browser or any consent controls we make available.

We receive information directly from you, from your organization and its authorized users, automatically from your browser or device, and from third-party integrations that you or your organization choose to connect. If a Rebnal customer submits information about another person, that customer is responsible for having a lawful basis and giving any required notices.

We use personal information to:

• provide, configure, maintain and support the website and services;
• authenticate users, administer workspaces and protect accounts;
• process authorized conversations and workflows on a customer's behalf;
• respond to requests, communicate service information and manage commercial relationships;
• monitor performance, troubleshoot problems and improve safety, reliability and usability;
• prevent fraud, abuse, security incidents and violations of our policies; and
• comply with law, enforce agreements and protect rights, safety and property.

Where applicable law requires a legal basis, the basis depends on the context and may be described in the relevant notice or signed agreement. The roles of Rebnal and a customer in relation to Customer Content are determined by applicable law and any signed data processing agreement.

Rebnal services may process voice, text and workflow data to produce automated responses, summaries, classifications and actions requested by a customer. AI output can be incomplete, inaccurate or unsuitable and should receive appropriate human review.

Customers using Rebnal to contact or monitor people must follow applicable privacy, telecommunications, marketing, recording and consent laws. They must provide required notices, respect opt-outs and avoid submitting information they are not authorized to use.

Depending on the active service and customer configuration, personal information may be disclosed:

• your organization's administrators and other users according to workspace permissions;
• third-party services that you direct us to connect;
• to a service provider when needed for an active, documented feature and subject to the applicable agreement; and
• when required by law or reasonably necessary to protect rights and safety.

A service notice or signed agreement may provide more detail about disclosures for a paid service. Applicable law determines whether additional notice or choices are required for a particular disclosure.

Information may be processed in Bangladesh or another country when a service or customer configuration requires it. Applicable law and any signed customer agreement govern cross-border processing. Customers should confirm hosting, localization and transfer requirements in writing before submitting production data that is subject to such restrictions.

We do not state one retention period for every category of information. Retention varies by the service, information type, customer instructions, applicable law and any signed agreement. We retain information only for as long as reasonably necessary for those purposes. A signed agreement may state service-specific retention terms.

We take reasonable administrative, technical and organizational steps appropriate to the service and the information involved. No system is completely secure. You are responsible for protecting your credentials, using appropriate workspace permissions and promptly reporting suspected unauthorized access.

Depending on applicable law, rights may include access, correction, deletion, restriction, objection, portability or withdrawal of consent. Requests may be sent using the public contact details below.

If your information was submitted by a Rebnal customer, that customer may be the appropriate first contact. Identity verification, response obligations and any permitted retention are determined by applicable law and any signed agreement.

Rebnal is intended for organizations and authorized business users. Do not submit children's personal information unless Rebnal has expressly authorized the specific processing in a signed agreement and you have all authority, notices, consent and safeguards required by law.

We may update this Policy as our services or legal obligations change. A revised Policy will state its effective date. Applicable law and any signed agreement determine whether additional notice or consent is required.

For privacy questions or requests, contact Rebnal using the details below. Do not send passwords, payment details or other sensitive secrets in a privacy request.