Privacy Policy

Rebel Growth Operators (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, with whom we share it, and the choices you have when you use our website and client dashboard (collectively, the “Services”).

By using our Services, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Information You Provide Directly

• Account information: When you create an account, we collect your name, email address, and organization details through our authentication provider, Clerk.
• Contact form submissions: Name, email address, company name, and any message content you submit through our contact form.
• Engagement data: Within the client dashboard, you may input project names, goals, notes, deliverable details, KPI definitions, milestone amounts, and billing information.
• Communications: If you contact us directly, we retain those communications and their contents.

Information Collected Automatically

• Usage analytics: We use PostHog to collect anonymized data about how visitors interact with our website — pages visited, session duration, and navigation patterns. This data does not identify you personally.
• Log data: Our servers automatically record your IP address, browser type, operating system, referring URLs, and pages visited.
• Cookies and similar technologies: We use cookies to maintain session state, remember preferences, and support analytics. See our Cookie Policy for full details.

Information from Third Parties

• Authentication providers: When you sign in via a social provider (e.g., Google), Clerk shares your basic profile information with us.
• Integration connections: If you connect third-party tools through the dashboard (e.g., CRMs, ad platforms), we receive data from those services as authorized by you.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, maintain, and improve our Services
• Create and manage your account and organization workspace
• Deliver engagement tracking, KPI monitoring, deliverable management, and billing features
• Send transactional communications (invoice notifications, work queue alerts, milestone approvals)
• Respond to inquiries and provide customer support
• Analyze usage patterns to improve platform performance and user experience
• Detect, prevent, and address fraud, abuse, or security incidents
• Comply with applicable legal obligations and enforce our Terms of Service

We do not sell your personal information. We do not use your data to train AI or machine learning models without your explicit consent.

3. How We Share Your Information

• Service providers: We share data with trusted vendors who help us operate our platform — including Clerk (authentication), Neon (database), Vercel (hosting), and PostHog (analytics). Each operates under confidentiality obligations and may not use your data for their own purposes.
• Within your organization: Data entered into a shared workspace (engagements, deliverables, KPIs, invoices) is visible to other members of your organization on the platform according to their assigned roles.
• Legal requirements: We may disclose information when required by law, court order, or governmental authority, or when we reasonably believe disclosure is necessary to protect the rights, property, or safety of Rebel Growth Operators, our users, or others.
• Business transfers: If we merge with or are acquired by another entity, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide Services. Upon account closure, we will delete or anonymize your personal data within 90 days, except where retention is required by law.

Engagement records, invoices, and audit logs may be retained for up to 7 years for financial record-keeping and compliance purposes.

5. Data Security

We implement industry-standard security practices including TLS encryption in transit, encrypted storage at rest, role-based access controls within the platform, and regular security reviews. Despite these measures, no transmission over the internet is completely secure. We encourage you to use a strong, unique password and enable multi-factor authentication on your account.

6. Your Rights and Choices

Depending on your location, you may have the right to:

• Access a copy of the personal data we hold about you
• Correct inaccurate or incomplete information
• Delete your personal data, subject to legal retention obligations
• Port your data in a structured, machine-readable format
• Object to or restrict certain types of processing
• Withdraw consent at any time where processing is consent-based, without affecting prior processing

To exercise these rights, contact us at the address below. We will respond within 30 days and may need to verify your identity before fulfilling your request.

7. Children’s Privacy

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

8. International Data Transfers

We are based in the United States. If you access our Services from outside the US, your information may be transferred to and processed in the United States or other countries where our service providers operate. We take appropriate safeguards — including contractual protections — to ensure your information is handled in accordance with this policy.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the updated policy with a revised date and, where appropriate, by email notification. Continued use of the Services after the effective date of any change constitutes acceptance of the updated policy.

10. Contact Us

For questions, concerns, or privacy requests, please reach out: