Rexchange, LLC ("Rexchange") Privacy Policy

What Is Personal Data at Rexchange?

At Rexchange, we believe strongly in fundamental privacy rights — and that those fundamental rights should be protected in the software and applications that you use. That's why we treat any data that relates to an identified or identifiable individual or that is linked or linkable to them by Rexchange as "personal data." This means that data that directly identifies you — such as your name — is personal data, and data that does not directly identify you, but that can reasonably be used to identify you — such as the serial number of your device — is personal data. Aggregated data is considered non-personal data for the purposes of this Privacy Policy.

This Privacy Policy covers how Rexchange or a Rexchange-affiliated company (collectively, "Rexchange") handles personal data whether you interact with us on our websites, through Rexchange apps, or in person (including by email or phone). Rexchange may also link to third parties on our services or make third-party apps available as part of our applications. Rexchange's Privacy Policy does not apply to how third parties define personal data or how they use it. We encourage you to read their privacy policies and know your privacy rights before interacting with them.

Your Privacy Rights at Rexchange

At Rexchange, we respect your ability to know, access, correct, transfer, restrict the processing of, and delete your personal data. If you choose to exercise these privacy rights, you have the right not to be treated in a discriminatory way nor to receive a lesser degree of service from Rexchange. Where you are requested to consent to the processing of your personal data by Rexchange, you have the right to withdraw your consent at any time.

To exercise your privacy rights and choices, including where a third-party service provider is acting on Rexchange's behalf, visit the Rexchange Data and Privacy page at rexchange.app/privacy/. To help protect the security of your personal data, you must sign in to your account and your identity will be verified. If you want to obtain a copy of personal data that is not currently available from privacy.Rexchange.com, you can make a request using the form available at rexchange.app/privacy/. You also have the right to lodge a complaint with the applicable regulator.

There may be situations where we cannot grant your request — for example, if you ask us to delete information and Rexchange is legally obligated to keep a record to comply with law. We may also decline to grant a request where doing so would undermine our legitimate use of data for anti-fraud and security purposes, such as when you request deletion of an account that is being investigated for security concerns. Other reasons your privacy request may be denied are if it jeopardizes the privacy of others, is frivolous or vexatious, or would be extremely impractical or unreasonable.

Personal Data Rexchange Collects from You

At Rexchange, we believe that you can have great products and great privacy simultaneously, so we collect only the personal data that we need. The personal data Rexchange collects depends on how you interact with Rexchange.

When you create an Rexchange Account and activate our product, download a software update, connect to our services, contact us (including by social media), participate in an online survey, or otherwise interact with Rexchange, we may collect a variety of information, including:

• Account Information. Your Rexchange Account and related account details, including email address, devices registered, account status, and age
• Device Information. Data from which your device could be identified, such as device serial number, or about your device, such as browser type
• Contact Information. Data such as name, email address, physical address, phone number, or other contact information
• Payment Information (if applicable). Data about your billing address and method of payment, such as bank details, credit, debit, or other payment card information
• Transaction Information (if applicable). Data about purchases of Rexchange products and services or transactions facilitated by Rexchange, including purchases on Rexchange platforms
• Fraud Prevention Information. Data used to help identify and prevent fraud, including a device trust score
• Usage Data. Data about your activity on and use of our offerings, such as app launches within our services, including browsing history; search history; product interaction; crash data, performance and other diagnostic data; and other usage data
• Location Information. Precise location only to support services such as region-specific services, and coarse location
• Real Estate License Information. If you are a real estate professional, we may ask for your licensing information, including when setting up a wireless account and activating your device.
• Other Information You Provide to Us. Details such as the content of your communications with Rexchange, including interactions with customer support and contacts through social media channels

You are not required to provide the personal data that we have requested. However, if you choose not to do so, in many cases we will not be able to provide you with our products or services or respond to requests you may have.

Personal Data Rexchange Receives from Other Sources

Rexchange may receive personal data about you from other individuals, from businesses or third parties acting at your direction, from our partners who work with us to provide our products and services and assist us in security and fraud prevention, and from other lawful sources.

• Individuals. Rexchange may collect data about you from other individuals — for example, if that individual has invited you to participate in an Rexchange service or forum, or shared content with you.
• At Your Direction. You may direct other individuals or third parties to share data with Rexchange.
• Rexchange Partners. We may also validate the information you provide — for example, when creating an Rexchange Account, with a third party for organizational access and security, and for fraud-prevention purposes.
• For research and development purposes, we may use datasets such as those that contain images, voices, or other data that could be associated with an identifiable person. When acquiring such datasets, we do so in accordance with applicable law, including law in the jurisdiction in which the dataset is hosted. When using such datasets for research and development, we do not attempt to reidentify individuals who may appear therein.

Rexchange's Use of Personal Data

Rexchange uses personal data to power our services, to process your transactions (if applicable), to communicate with you, for security and fraud prevention, and to comply with law. We may also use personal data for other purposes with your consent. Rexchange uses your personal data only when we have a valid legal basis to do so. Depending on the circumstance, Rexchange may rely on your consent or the fact that the processing is necessary to fulfill a contract with you, protect your vital interests or those of other persons, or to comply with law. We may also process your personal data where we believe it is in our or others legitimate interests, taking into consideration your interests, rights, and expectations.

If you have questions about the legal basis, you can contact the Privacy Officer at privacy@rexchange.app.

• Power Our Services. Rexchange collects personal data necessary to power our services, which may include personal data collected to improve our offerings, for internal purposes such as auditing or data analysis, or for troubleshooting. For example, if you would like to access a property through the Rexchange app, we collect data on what sale price you enter in order to provide you with the content requested.
• Process Your Transactions. If there are transactions through the app, Rexchange must collect data such as your name, purchase, and payment information.
• Communicate with You. To respond to communications, reach out to you about your transactions or account, market our products and services, provide other relevant information, or request information or feedback. From time to time, we may use your personal data to send important notices, such as communications about purchases and changes to our terms, conditions, and policies. Because this information is important to your interaction with Rexchange, you may not opt out of receiving these important notices.
• Security and Fraud Prevention. To protect individuals, employees, and Rexchange and for loss prevention and to prevent fraud, including to protect individuals, employees, and Rexchange for the benefit of all our users, and prescreening or scanning uploaded content for potentially illegal content.
• Personal Data Used for Personalization. If you choose to personalize your services or communications where such options are available, Rexchange will use information that we collect so that we can offer you those personalized services or communications. You can learn more about how relevant services use information to personalize your experience by reviewing the privacy information presented when you first use a service that asks to use your personal data.
• Comply with Law. To comply with applicable law — for example, to satisfy tax or reporting obligations, or to comply with a lawful governmental request.

Rexchange does not use algorithms or profiling to make any decision that would significantly affect you without the opportunity for human review. Rexchange also does not use or disclose sensitive personal data for any purposes that would require a user to exercise a right to limit processing according to California law.

Rexchange retains personal data only for so long as necessary to fulfill the purposes for which it was collected, including as described in this Privacy Policy or in our service-specific privacy notices, or as required by law. We will retain your personal data for the period necessary to fulfill the purposes outlined in this Privacy Policy and our service-specific privacy notices. When assessing retention periods, we first carefully examine whether it is necessary to retain the personal data collected and, if retention is required, work to retain the personal data for the shortest possible period permissible under law.

Rexchange's Sharing of Personal Data

Rexchange may share personal data with Rexchange-affiliated companies, service providers who act on our behalf, our partners, developers, and publishers, or others at your direction. Further, Rexchange does not share personal data with third parties for their own marketing purposes.

• Service Providers. Rexchange may engage third parties to act as our service providers and perform certain tasks on our behalf, such as processing or storing data, including personal data, in connection with your use of our services and delivering products to customers. Rexchange service providers are obligated to handle personal data consistent with this Privacy Policy and according to our instructions. They cannot use the personal data we share for their own purposes and must delete or return the personal data once they've fulfilled our request.
• Partners. At times, Rexchange may partner with third parties to provide services or other offerings. Rexchange requires its partners to protect your personal data.

Protection of Personal Data at Rexchange

At Rexchange, we believe that great privacy rests on great security. We use administrative, technical, and physical safeguards to protect your personal data, taking into account the nature of the personal data and the processing, and the threats posed. We are constantly working to improve on these safeguards to help keep your personal data secure.

Children and Personal Data

Rexchange understands the importance of safeguarding the personal data of children, which we consider to be an individual under the age of 13 or the equivalent age as specified by law in your jurisdiction. As we don't envision children being users of the Rexchange app, we have implemented additional processes to verify the age of users.

Cookies and Other Technologies

Rexchange's websites, online services, interactive applications, and advertisements may use "cookies" and other technologies. These technologies help us to better understand user behavior including for security and fraud prevention purposes, tell us which parts of our application and websites people have visited, and facilitate and measure the effectiveness of our products.

Communications Cookies. These cookies are used to enable network traffic to and from Rexchange's systems, including by helping us detect any errors.

Strictly Necessary Cookies. These cookies are set as required to provide a specific feature or service that you have accessed or requested. For example, they allow us to display our application and websites in the proper format and language, to authenticate and verify your transactions, and to preserve the contents of your account.

Other Cookies. These cookies are used to understand how visitors interact with our websites and online services. Rexchange uses these cookies to remember choices you make while browsing, so we can provide you with a customized experience.

If you prefer that Rexchange not use cookies, we provide you with the means to disable their use.

Certain features of the Rexchange application and website may not be available if all cookies are disabled.

In addition to cookies, Rexchange uses other technologies that help us achieve similar objectives.

Rexchange generally treats data we collect using these cookies and similar technologies as non-personal data. However, to the extent that Internet Protocol (IP) addresses or similar identifiers are considered personal data by local law, we also treat these identifiers as personal data in those regions. In addition, Rexchange sometimes combines non-personal data collected from these technologies with other personal data Rexchange holds. When we combine data in this way, we treat the combined data as personal data for purposes of this Privacy Policy.

Privacy Questions

If you have questions about Rexchange's Privacy Policy or privacy practices including where a third-party service provider is acting on our behalf, or you would like to contact our Data Protection Officer, you can contact us at privacy@rexchange.app

You can also ask us questions about how to submit a privacy complaint and we will endeavor to help. Rexchange takes your privacy questions seriously. A dedicated team reviews your inquiry to determine how best to respond to your question or concern, including those inquiries received in response to an access or download request. In most cases, all substantive contacts receive a response within thirty (30) days. In other cases, we may require additional information or let you know that we need more time to respond.

Where your complaint indicates an improvement could be made in our handling of privacy issues, we will take steps to make such an update at the next reasonable opportunity. In the event that a privacy issue has resulted in a negative impact on you or another person, we will take steps to address that with you or that other person. You may at any time — including if you are not satisfied with Rexchange's response — refer your complaint to the applicable regulator. If you ask us, we will endeavor to provide you with information about relevant complaint avenues which may be applicable to your circumstances.

When there is a material change to this Privacy Policy, we'll post a notice on this website at least a week in advance of doing so and contact you directly about the change if we have your data on file.