Privacy Policy

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You.

The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

• names
• phone numbers
• email addresses
• mailing addresses
• usernames
• passwords
• billing addresses
• contact or authentication data

Sensitive Information.

We do not process sensitive information such as race, religion, or health data.

Payment Data.

We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number, and the security code associated with your payment instrument. All payment data is handled and stored by the third-party provider, Stripe. You may find their privacy notice here: https://stripe.com/privacy. All third-party processors are bound by written contracts that specify the purpose, duration, and scope of data processing, require appropriate security measures, and restrict use of personal information in compliance with applicable laws.

Social Media Login Data.

We may provide you with the option to register with us using your existing social media account details, like your Facebook, X, or other social media account. If you choose to register in this way, we will collect certain profile information about you from the social media provider, as described in the section called "HOW DO WE HANDLE YOUR SOCIAL LOGINS?" below.

Application Data.

If you use our App, we also may collect the following information if you choose to provide us with access or permission:

• Geolocation Information. We may request access or permission to track location-based information from your mobile device, either continuously or while you are using our mobile App, to provide certain location-based services. We will only process precise geolocation data with your express opt-in consent, which you may withdraw at any time. If you wish to change our access or permissions, you may do so in your device's settings.
• Mobile Device Access. We may request access or permission to certain features from your mobile device, including your mobile device's calendar, camera, sms messages, and other features. If you wish to change our access or permissions, you may do so in your device's settings.
• Mobile Device Data. We automatically collect device information (such as your mobile device ID, model, and manufacturer), operating system, version information and system configuration information, device and application identification numbers, browser type and version, hardware model Internet service provider and/or mobile carrier, and Internet Protocol (IP) address (or proxy server). If you are using our App, we may also collect information about the phone network associated with your mobile device, your mobile device's operating system or platform, the type of mobile device you use, your mobile device's unique device ID, and information about the features of our App you accessed.
• Push Notifications. We may request to send you push notifications regarding your account or certain features of the App. If you wish to opt out from receiving these types of communications, you may turn them off in your device's settings.

This information is primarily needed to maintain the security and operation of our App, for troubleshooting, and for our internal analytics and reporting purposes.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location (with opt-in for precise location as described above), information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

Like many businesses, we also collect information through cookies and similar technologies. You can find out more about this in our Cookie Notice: http://www.rec-x.com/cookie.

The information we collect includes:

• Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called "crash dumps"), and hardware settings.
• Device Data. We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.
• Location Data. We collect location data such as information about your device's location, which can be either precise or imprecise (with opt-in for precise location as described above). How much information we collect depends on the type and settings of the device you use to access the Services. For example, we may use GPS and other technologies to collect geolocation data that tells us your current location (based on your IP address). You can opt out of allowing us to collect this information either by refusing access to the information or by disabling your Location setting on your device. However, if you choose to opt out, you may not be able to use certain aspects of the Services.

Google API

Our use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We process the personal information for the following purposes listed below. We may also process your information for other purposes only with your prior explicit consent.

We process personal information for a variety of reasons, depending on how you interact with our Services, only when we have a valid legal basis to do so. The categories of data we collect (see Section 1) are processed for the following purposes:

• Account Management (Identifiers, Contact Information): To create, authenticate, and maintain your user account.
• Service Delivery (Identifiers, Payment Data, Geolocation, Device Data): To process bookings, enable navigation, and deliver requested services.
• Customer Support (Identifiers, Communications): To respond to inquiries, provide support, and resolve issues.
• Administrative Communications (Identifiers, Contact Information): To send notices about changes to terms, policies, or services.
• User-to-User Communications (Identifiers, Messaging Data): To facilitate communications where features allow.
• Marketing and Promotions (Identifiers, Contact Information, Device/Usage Data): To send you promotional content in accordance with your marketing preferences.
• Targeted Advertising & Personalization (Identifiers, Device/Usage Data, Geolocation): To develop and display personalized ads and recommendations.
• Testimonials (Identifiers, Communications): To display testimonials you voluntarily provide.
• Fraud Prevention & Security (Identifiers, Device Data, Log Files): To monitor, detect, and prevent fraudulent or unauthorized activity.
• Contests & Promotions (Identifiers, Contact Information): To administer prize draws, contests, and surveys.
• Service Improvement (Usage Data, Feedback, Analytics): To evaluate usage trends, improve features, and measure the effectiveness of marketing campaigns.
• Legal Obligations (Identifiers, Payment Data, Communications): To comply with tax, accounting, and legal requirements, and to exercise or defend legal rights.

Sensitive Data Processing

We will only process sensitive personal data (such as precise geolocation) with your express opt-in consent as required by state law. You may withdraw your consent at any time by updating your device settings or contacting us at support@rec-x.com.

Legal Bases for Processing

We rely on the following legal bases when processing your information:

• Consent: When you give us permission (e.g., to process precise location data).
• Contractual Necessity: To perform services or provide products you request.
• Legal Obligation: To comply with tax, fraud prevention, and other regulatory requirements.
• Legitimate Interests: To improve services, prevent misuse, and personalize experiences, provided your privacy rights do not override these interests.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.

Because we serve users nationwide, this policy incorporates the strictest U.S. requirements as well as widely acceptable international standards.

We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, such as enabling precise geolocation data, agreeing to receive marketing communications, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time by adjusting your device or account settings, or by contacting us at support@rec-x.com. Withdrawal does not affect the lawfulness of prior processing.

In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including, for example:

• If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way;
• For investigations and fraud detection and prevention;
• For business transactions provided certain conditions are met, including to create your account, process payments, deliver bookings, or to provide other requested services;
• If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim;
• In cases of emergency that threaten life or safety, or for identifying injured, ill, or deceased persons and communicating with next of kin;
• If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse;
• If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement;
• If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records;
• If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced;
• If the collection is solely for journalistic, artistic, or literary purposes;
• If the information is publicly available and is specified by the regulations; and
• We may disclose de-identified information for approved research or statistics projects, subject to ethics oversight and confidentiality commitments.

We will not process your personal information for purposes that are materially different, unrelated or incompatible with the purposes outlined in the policy unless we have obtained your consent.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share information in specific situations described in this section and/or with the following third parties. We do not sell personal information.

We may need to share your personal information in the following situations:

• Service Providers & Processors: Third parties who process information on our behalf and under our instructions, such as payment processors (Stripe), hosting providers, analytics providers (Google Analytics), AI service providers, and cloud storage services. All processors are bound by written contracts specifying the duration, nature, and purpose of processing, requiring appropriate technical and organizational safeguards, and restricting use of personal data in compliance with state laws.
• Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• Legal & Regulatory Authorities: When required by applicable law, regulation, legal process, or government request (e.g., tax authorities, regulators, courts).
• Corporate Transactions: In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of company assets. In such cases, personal information will be transferred to the successor entity subject to this Policy.
• Targeted Advertising Providers: We may share identifiers, device data, and usage data with advertising networks or platforms to deliver relevant advertising.

Under state law, you have the right to opt out of such sharing. To exercise this right, please contact support@rec-x.com.

We will not disclose your personal information to third parties for purposes materially different from those disclosed in this Policy unless we first obtain your consent, except where required by law.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: Yes. We and our service providers use cookies and similar tracking technologies (such as web beacons, pixels, and local storage) to operate, improve, and personalize our Services.

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services and your account, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.

We use the following types of cookies:

• Essential Cookies: Required for core functionality (authentication, security, fraud prevention).
• Performance & Analytics Cookies: Help us analyze how our Services are used and improve performance.
• Functional Cookies: Remember preferences and enable enhanced features.
• Advertising & Targeting Cookies: Collect data to deliver relevant advertising and measure campaign effectiveness.

We also permit third parties and service providers to use online tracking technologies on our Services for analytics and advertising, including to help manage and display advertisements, to tailor advertisements to your interests, or to send abandoned shopping cart reminders (depending on your communication preferences). The third parties and service providers use their technology to provide advertising about products and services tailored to your interests which may appear either on our Services or on other websites.

To the extent these online tracking technologies are deemed to be a "sale"/"sharing" (which includes targeted advertising, as defined under the applicable laws) under applicable US state laws, you can opt out of these online tracking technologies by submitting a request as described below under section "DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?"

Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice: http://www.rec-x.com/cookie. We honor legally required browser-based opt-out signals, including Global Privacy Control.

Google Analytics

We may share your information with Google Analytics to track and analyze the use of the Services. The Google Analytics Advertising Features that we may use include: Remarketing with Google Analytics, Google Display Network Impressions Reporting and Google Analytics Demographics and Interests Reporting.

To opt out of being tracked by Google Analytics across the Services, visit https://tools.google.com/dlpage/gaoptout. You can opt out of Google Analytics Advertising Features through Ads Settings and Ad Settings for mobile apps. Other opt out means include http://optout.networkadvertising.org/ and http://www.networkadvertising.org/mobile-choice. For more information on the privacy practices of Google, please visit the Google Privacy & Terms page.

6. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?

In Short: We offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies.

As part of our Services, we offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies (collectively, "AI Products"). These tools are designed to enhance your experience and provide you with innovative solutions. The terms in this Privacy Notice govern your use of the AI Products within our Services.

When you use AI Products, we may process the following categories of data, depending on your inputs:

• Identifiers (account details, contact information);
• Text, documents, or images you submit as input; and
• Outputs generated by AI tools (which may contain personal information if you include it in your input).

We do not intentionally process sensitive data (such as health, biometrics, or precise location) through AI Products unless you provide it voluntarily and give your explicit opt-in consent.

Use of AI Technologies

We provide the AI Products through third-party service providers ("AI Service Providers"), including Anthropic, Google Cloud AI, Hugging Face, OpenAI and xAI. These providers process your inputs/outputs only to deliver the AI functionality within our Services, subject to contractual safeguards requiring security and compliance with applicable laws. As outlined in this Privacy Notice, your input, output, and personal information will be shared with and processed by these AI Service Providers to enable your use of our AI Products for purposes outlined in "WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?" You must not use the AI Products in any way that violates the terms or policies of any AI Service Provider.

Our AI Products

Our AI Products are designed for the following functions:

• AI predictive analytics
• AI development
• AI automation
• AI document generation
• AI search
• AI translation
• Image analysis
• Image generation
• Natural language processing
• Text analysis

How We Process Your Data Using AI

All personal information processed using our AI Products is handled in line with our Privacy Notice and our agreement with third parties. This ensures high security and safeguards your personal information throughout the process, giving you peace of mind about your data's safety. Under state law, you may opt out of the use of your personal data for profiling or targeted advertising related to AI Products. You may request additional information on how AI Products process your personal information by contacting us at support@rec-x.com.

7. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

In Short: If you choose to register or log in to our Services using a social media account, we may have access to certain information about you.

Our Services offer you the ability to register and log in using your third-party social media account details (Facebook, Google, Apple, or X). Where you choose to do this, we will receive certain profile information about you from your Social Login Provider, including your name, email, and profile information.

8. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law. Account data is retained for the duration of your account. Transaction data is retained for up to 7 years to comply with tax obligations.

9. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, no system is completely secure. If we experience a data breach, we will notify you as required under applicable law.

10. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

Our Services are intended only for individuals who are at least 18 years of age. We do not knowingly collect, solicit data from, or market to anyone under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@rec-x.com.

11. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: Depending on your state of residence, you have rights that allow you greater access to and control over your personal information.

You may have the right to: (i) request access and obtain a copy of your personal information, (ii) request rectification or erasure; (iii) restrict the processing of your personal information; (iv) data portability; and (v) not to be subject to automated decision-making. You may also opt out of the sale or sharing of your personal data, targeted advertising, and profiling. You can make such a request by contacting us at support@rec-x.com.

12. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature. We do not currently respond to DNT browser signals. However, we do recognize and honor legally required universal opt-out mechanisms, such as the Global Privacy Control (GPC) signal.

13. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: If you are a resident of certain U.S. states, you may have additional privacy rights under applicable state laws.

These rights may include the ability to confirm whether we process your personal data and access a copy of it, request correction of inaccuracies, request deletion of your personal data, and obtain your personal data in a portable format. You may also opt out of the sale or sharing of personal data, targeted advertising, and profiling. California residents additionally have the right to request that we limit the use and disclosure of sensitive personal information.

To exercise these rights, contact us at support@rec-x.com.

14. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Revised" date at the top of this Privacy Notice. If we make material changes, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification.

15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may email us at support@rec-x.com or contact us at the following address:

16. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information.

To request to review, update, or delete your personal information, please fill out and submit a data subject access request or email us at support@rec-x.com. We will respond to verified requests within the timeframes required by applicable law (generally 45 days).