Privacy Policy for RedNine, Inc.

Last Revised: May 6, 2025

RedNine, Inc. (d/b/a Rebolt) ("Rebolt," "we," "our," and/or "us") values the privacy of individuals who use our website, mobile applications, and related online services (collectively, our "Services" or "Platform"). This privacy policy (the "Privacy Policy") explains how we collect, use, and share information from users of our Services ("Users," "you," and/or "your"). By using our Services, you agree to the collection, use, disclosure, and procedures this Privacy Policy describes. Beyond this Privacy Policy, your use of our Services is also subject to our Terms of Service.

Rebolt is a business management platform for home service companies — including landscaping, HVAC, roofing, pressure washing, junk removal, and similar trades. Our platform provides customer relationship management (CRM), AI-powered voice assistant services, marketing tools (website builder, social media, email and SMS campaigns), field technician management, quoting, invoicing, and payment processing. Our direct customers ("Users") are home service business owners and their employees. Those Users interact with their own customers ("End Customers" or "Homeowners") through our Platform.

1. Information We Collect

We collect the following types of information when you use our Services:

• Account Information. When you create an account, we collect information such as your name, email address, phone number, business name, and billing information.
• Device Information. We receive information about the device and software you use to access our Services, such as your IP address, web browser type, operating system version, phone carrier and manufacturer, application installations, device identifiers, mobile advertising identifiers, and push notification tokens.
• Location Information. When you allow location sharing, we collect your location to support clock-in and clock-out records for field technicians and to provide directions from your current location to a service appointment.
• Usage Information. We automatically receive information about your interactions with our Services, such as the pages or content you view, the searches you conduct, actions you take within the platform, and the dates and times of your visits.
• Communications Data. When you use our communication features (email, SMS, or AI Voice Assistant), we collect and store the content and metadata of those communications to provide and improve the Services.
• Call Recordings and Transcripts. If you enable our AI Voice Assistant, calls may be recorded and/or transcribed. See Section 7 (AI Voice Assistant and Call Recording) for details.
• Payment Information. When you make payments through the Platform, payment card details are collected and processed directly by our payment processor, Stripe. We do not store full payment card numbers on our servers.
• Information from Cookies and Similar Technologies. We and third-party partners collect information using cookies, pixel tags, or similar technologies. Our third-party partners, such as analytics partners, may use these technologies to collect information about your online activities over time and across different services. Cookies are small text files containing a string of alphanumeric characters. We may use both session cookies and persistent cookies. A session cookie disappears after you close your browser. A persistent cookie remains after you close your browser and may be used by your browser on subsequent visits to our Services. Please review your web browser's "Help" file to learn the proper way to modify your cookie settings. If you delete or choose not to accept cookies, you may not be able to use all features of the Service.

2. How We Use Your Information

We use the information we collect to provide you with our business management platform and related services. Specifically, we may use your information:

• To provide, maintain, improve, and enhance our Services;
• To personalize your experience on our Services, such as by providing tailored content, recommendations, and AI-generated marketing materials;
• To understand and analyze how you use our Services and develop new products, services, features, and functionality;
• To communicate with you, provide you with updates and other information relating to our Services, respond to comments and questions, and provide customer support;
• To send you email, text messages, and push notifications;
• To facilitate transactions and payments;
• To power our AI Voice Assistant, including answering and placing calls on your behalf, booking appointments, and handling customer inquiries;
• To use location data you choose to share for clock-in and clock-out records and for directions to service appointments;
• To find and prevent fraud, and respond to trust and safety issues;
• For compliance purposes, including enforcing our Terms of Service or other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency;
• For other purposes for which we provide specific notice at the time the information is collected.

3. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. However, we share your information in the following circumstances:

• Service Providers. We share information with trusted third-party service providers who assist us in operating our platform, processing payments, sending communications, and providing other services on our behalf. These providers are contractually obligated to use your information only as directed by us and in accordance with this Privacy Policy.
• Legal Requirements. We may disclose your information if required to do so by law, or if we believe in good faith that such action is necessary to comply with legal obligations, protect our rights or safety, or investigate potential violations of our Terms of Service.
• Business Transfers. If Rebolt is involved in a merger, acquisition, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal information.
• With Your Consent. We may share your information with third parties when you give us explicit consent to do so.

4. Third-Party Services and Subprocessors

We use third-party service providers ("subprocessors") to help operate our platform. These providers may process personal data on our behalf. Below is a summary of our key subprocessors:

Each of these providers has their own privacy policy governing how they handle data. We encourage you to review their policies. We may update this list of subprocessors from time to time as our service providers change.

5. Data Security

We take the security of your data seriously. We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information. These include:

• Encryption in transit and at rest. All data transmitted between your device and our servers is encrypted using SSL/TLS. Data stored in our databases is encrypted at rest.
• Access controls. We enforce multi-factor authentication (MFA) for all internal team members. Access to personal data is restricted on a role-based, need-to-know basis.
• Cloud infrastructure security. Our Services are hosted on major cloud providers (AWS, Vercel, Neon) that maintain industry-standard security controls, including physical security, network protections, and regular audits.
• Monitoring. We monitor our systems for unauthorized access attempts and anomalous activity.

No method of transmission over the Internet and no method of electronic storage is 100% secure. While we strive to use commercially reasonable means to protect your personal information, we cannot guarantee its absolute security. If you believe your account has been compromised or have a security concern, please contact us immediately at support@rebolthq.com.

6. Your Rights

You have the following rights regarding your personal information:

• Access. You may request a copy of the personal information we hold about you.
• Correction. You may request that we correct inaccurate or incomplete personal information.
• Deletion. You may request that we delete your personal information, subject to certain exceptions (such as where retention is required by law).
• Opt-out of marketing. You may opt out of receiving marketing emails by clicking the "unsubscribe" link in any marketing email, or by contacting us. You may opt out of marketing SMS messages by replying "STOP." Please note that even if you opt out of marketing communications, we may still send you transactional or service-related messages.

To exercise any of these rights, please contact us at support@rebolthq.com. We will respond to your request within 30 days. We may ask you to verify your identity before processing your request.

7. AI Voice Assistant and Call Recording

Rebolt offers an AI-powered voice assistant that can answer and place phone calls on behalf of home service businesses that are Rebolt customers. Here is what you should know about how this feature handles data:

• Calls handled by the AI Voice Assistant may be recorded and/or transcribed for the purpose of providing the service, including booking appointments, answering questions, and handling customer inquiries.
• Call recordings and transcripts are stored securely and used solely to provide and improve the voice assistant service.
• Rebolt provides customers with the option to enable a call recording disclosure prompt (e.g., "this call may be recorded") at the beginning of calls.
• Compliance responsibility: Rebolt's business customers (the home service companies) are responsible for ensuring they comply with all applicable call recording consent laws in their jurisdiction. These laws vary by state — some states require only one-party consent, while others (including California, Illinois, Maryland, Connecticut, and others) require all-party consent.
• Users may contact support@rebolthq.com to request deletion of call recordings and transcripts associated with their account.

8. Business Customer Data

Rebolt is a B2B platform. When we process data on behalf of our business customers — for example, their End Customers' names, phone numbers, and addresses stored in the CRM — we act as a data processor, not a data controller, with respect to that data.

• Our business customers are responsible for their own compliance with applicable privacy laws regarding their End Customers' data, including obtaining any required consents.
• We process such data solely as directed by our business customers and in accordance with this Privacy Policy and any applicable Data Processing Agreement.
• If you are an End Customer of one of our business customers and have questions about how your data is handled, we encourage you to contact that business directly. You may also contact us at support@rebolthq.com and we will direct your inquiry appropriately.

9. Data Retention

• Account data is retained for the duration of your active subscription and for 90 days after account termination. This allows time for account reactivation or data export requests.
• Call recordings and transcripts are retained as configured by the User within their account settings.
• Deletion requests. You may request deletion of your data at any time by contacting support@rebolthq.com.
• Exceptions. We may retain certain data beyond the periods described above where required by law or for legitimate business purposes, such as fraud prevention, dispute resolution, or enforcing our agreements.

10. California Privacy Rights (CCPA)

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA). This section describes those rights.

• We do not sell personal information. Rebolt does not sell your personal information to third parties.
• Right to know. You have the right to request that we disclose what personal information we have collected about you, the categories of sources from which it was collected, the business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to delete. You have the right to request that we delete personal information we have collected from you, subject to certain exceptions.
• Right to opt out of sale. Because we do not sell personal information, this right is not applicable — but you may still submit such a request and we will confirm our non-sale status.
• Right to non-discrimination. We will not discriminate against you for exercising any of your CCPA rights.

To submit a California privacy rights request, please email us at support@rebolthq.com with the subject line "California Privacy Request." We will respond within 45 days.

Note: As a B2B platform, most of our Users are business entities rather than individual consumers. Regardless, Rebolt respects the privacy rights of all individuals whose personal information we process.

11. Children's Privacy

Our Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete that information promptly. If you believe that a child under 13 has provided personal information to us, please contact us at support@rebolthq.com.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Revised" date at the top of this page. If we make material changes, we will notify you by email or by posting a prominent notice on our website prior to the change becoming effective. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

13. Contact Information

If you have any questions or concerns about this Privacy Policy, or if you would like to exercise any of your rights described above, please contact us at:

RedNine, Inc. (d/b/a Rebolt)
Email: support@rebolthq.com
Website: rebolthq.com