Privacy Policy

1. Information We Collect

1.1 Information You Provide

We collect information you provide directly to us, including:

• Account Information: Name, email address, password, organization name
• Profile Information: Profile photo, job title, phone number (optional)
• Payment Information: Credit card details, billing address (processed securely by third-party payment processors)
• Content and Communications: Messages, support inquiries, knowledge base content, uploaded documents
• Feedback: Survey responses, reviews, testimonials

1.2 Information Automatically Collected

When you use our Service, we automatically collect:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Information: Pages visited, features used, time spent, click patterns, interaction data
• Location Information: General geographic location based on IP address
• Cookies and Tracking: Session data, preferences, authentication tokens
• Log Data: Server logs, error reports, API usage

1.3 Information from Third Parties

We may receive information from third-party services you connect to our platform, analytics providers, payment processors, and marketing partners in accordance with their privacy policies.

2. How We Use Your Information

We use the collected information for the following purposes:

2.1 Service Provision

• Provide, maintain, and improve the Service
• Process transactions and send related information
• Authenticate users and prevent fraud
• Provide customer support and respond to inquiries
• Train and improve our AI models and algorithms

2.2 Communication

• Send transactional emails (receipts, account notifications, security alerts)
• Send marketing communications (with your consent)
• Respond to your comments and questions
• Send product updates and feature announcements

2.3 Analytics and Improvement

• Monitor and analyze usage trends and preferences
• Conduct research and development
• Detect, prevent, and address technical issues
• Measure the effectiveness of our marketing campaigns

2.4 Legal and Security

• Comply with legal obligations and enforce our Terms of Service
• Protect against fraud, security threats, and illegal activity
• Investigate and prevent violations of our policies
• Protect the rights, property, and safety of Resly, our users, and the public

3. How We Share Your Information

We may share your information in the following circumstances:

3.1 Service Providers

We share information with third-party service providers who perform services on our behalf, including:

• Cloud hosting and infrastructure providers (e.g., AWS, Google Cloud)
• Payment processors (e.g., Stripe)
• Email service providers
• Analytics services (e.g., Google Analytics)
• Customer support tools
• AI and machine learning service providers

3.2 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction.

3.3 Legal Requirements

We may disclose your information if required by law, legal process, or government request, or if we believe disclosure is necessary to:

• Comply with legal obligations or respond to lawful requests
• Enforce our Terms of Service or other agreements
• Protect our rights, property, or safety
• Investigate fraud or security issues

3.4 With Your Consent

We may share your information with third parties when we have your explicit consent to do so.

4. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit and at rest (TLS/SSL, AES-256)
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Secure data centers with physical security measures
• Employee training on data protection and security best practices
• Incident response and breach notification procedures

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy. Retention periods vary based on:

• Active Accounts: We retain your data while your account is active
• Closed Accounts: We may retain certain data for up to 90 days after account closure for backup and recovery
• Legal Requirements: We retain data as required by law, regulation, or legal obligation
• Business Records: Financial and transaction records retained for tax and accounting purposes (typically 7 years)

You may request deletion of your data at any time, subject to legal and contractual obligations.

6. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

6.1 General Rights

• Access: Request access to your personal information
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your information (subject to legal requirements)
• Data Portability: Request a copy of your data in a structured, machine-readable format
• Objection: Object to processing of your information for certain purposes
• Restriction: Request restriction of processing in certain circumstances
• Withdrawal of Consent: Withdraw consent where processing is based on consent

6.2 GDPR Rights (European Users)

If you are in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with a supervisory authority.

6.3 CCPA Rights (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your rights

To exercise your rights, please contact us at privacy@resly.ai. We will respond to your request within the timeframe required by applicable law.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information. Types of cookies we use:

• Essential Cookies: Required for the Service to function properly (authentication, security)
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand how you use the Service
• Marketing Cookies: Track your activity for advertising purposes

You can control cookies through your browser settings. Note that disabling certain cookies may limit your ability to use some features of the Service.

8. Third-Party Services

Our Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

Third-party services we integrate with may include: OpenAI, Anthropic, Google Analytics, Stripe, and various authentication providers.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

When we transfer data internationally, we implement appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, to ensure your data is protected.

Governing Law and Jurisdiction

This Privacy Policy and any disputes arising from it shall be governed by and construed in accordance with the laws of the Dubai International Financial Centre (DIFC), United Arab Emirates. Any legal action or proceeding relating to this Privacy Policy shall be instituted exclusively in the DIFC Courts.

10. Children's Privacy

Our Service is not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children.

If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete such information. If you believe we have collected information from a child, please contact us immediately.

11. AI and Machine Learning

Our Service uses AI and machine learning technologies. Here's how we handle your data:

• We use your content to provide AI-powered responses and features
• We may use aggregated, anonymized data to improve our AI models
• We do not share your specific content with third-party AI providers unless necessary to provide the Service
• You retain ownership of your content and AI-generated outputs

12. Do Not Track

Some browsers have a "Do Not Track" feature that signals to websites that you do not want your online activities tracked. We do not currently respond to Do Not Track signals.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date
• Sending you an email notification (for material changes)

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: