Skip to content
Schedule a demo

Privacy Policy

Last updated: 1 May 2026

Rex AI Ltd. (“Rex”, “we”, “us”, or “our”) is committed to protecting your privacy. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our accounts receivable automation platform and related services.

Information We Collect

Information you provide

We collect information you voluntarily provide when using our services, including: account registration details such as name, email address, and company information; billing and payment information; communications you send to us; and any other information you choose to provide.

Information collected automatically

When you access our platform, we automatically collect certain information including: device and browser information; IP address and location data; usage data such as pages visited, features used, and time spent; and log data and analytics information.

Information from third party integrations

When you connect third party services to Rex (such as your ERP system, email, or accounting software), we may collect information from those services as necessary to provide our platform functionality. This may include invoice data, customer contact information, payment records, and related financial data.

How We Use Your Information

We use the information we collect to: provide, maintain, and improve our services; process transactions and send related information; send you technical notices, updates, and support messages; respond to your comments, questions, and requests; monitor and analyse trends, usage, and activities; detect, investigate, and prevent fraudulent transactions and other illegal activities; and comply with legal obligations.

How We Share Your Information

We may share your information in the following circumstances: with service providers who perform services on our behalf; with business partners with your consent; in response to legal process or government requests; to protect the rights, privacy, safety, or property of Rex, you, or others; and in connection with a merger, acquisition, or sale of assets.

We do not sell your personal information to third parties.

Data Security

Rex maintains a documented information security programme and externally communicates its key commitments through this Privacy Policy, our Terms of Service, our Data Processing Agreement, our AI Security overview, and our publicly accessible Trust Center. Our key technical and organisational measures include:

  • Encryption of personal data in transit (TLS 1.2 or higher) and at rest (AES-256), including database backups.
  • Role-based access controls, multi-factor authentication, least-privilege provisioning, and regular access reviews.
  • Infrastructure hosted on AWS with VPC isolation, network access controls, and continuous monitoring.
  • Tenant isolation so personal data is logically segregated between customers and is not used to train or fine-tune any AI models.
  • Documented incident detection, response, and breach notification procedures, with notification to affected customers without undue delay.
  • Personnel controls including background checks, signed confidentiality agreements, and recurring security awareness training.
  • Continuous improvement through vulnerability scanning, dependency monitoring, and independent assessments.

Rex is pursuing SOC 2 Type II certification. A current list of subprocessors, certifications, and our overall security posture is maintained at our Trust Center linked above. No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Data Retention

We retain your information for as long as necessary to provide our services and fulfil the purposes described in this policy, unless a longer retention period is required or permitted by law. When we no longer need to retain your information, we will securely delete or anonymise it.

Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information, including the right to: access, correct, or delete your personal information; object to or restrict certain processing; data portability; and withdraw consent where processing is based on consent. To exercise these rights, please contact us using the details below.

International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure your information remains protected in accordance with this policy.

Changes to This Policy

We may update this privacy policy from time to time. If we make material changes, we will notify you by email or through our platform prior to the changes becoming effective. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us at:

Rex AI Ltd.
Email: admin@rex.inc