RebutIT Privacy Policy and TermsThis draft is a business-first template designed to help RebutIT prepare for legal review. It is not a substitute for advice from qualified counsel. Privacy, AI, employment, consumer protection, data retention, and mobile platform requirements vary by jurisdiction and by your actual product behavior. You should have counsel review this draft before publishing or relying on it.This draft assumes RebutIT is a consumer-facing workplace documentation and reporting platform that may allow users to create accounts, upload notes and files, generate AI-assisted summaries, and export materials for attorney review. It also assumes RebutIT is not a law firm, does not provide legal advice, and is intended for adult users.PRIVACY POLICYEffective Date: May 1, 2026Last Updated: May 1, 2026Entity: [Blcklux LLC], doing business as RebutIT ("RebutIT," "we," "our," or "us")This Privacy Policy explains how RebutIT collects, uses, discloses, stores, and protects personal information when you access or use our websites, mobile applications, products, features, content, or services that link to this Privacy Policy (collectively, the "Services").By using the Services, you acknowledge that you have read and understood this Privacy Policy.1. ScopeThis Privacy Policy applies to information we collect through:our website and mobile applicationsuser registration and account managementworkplace logs, notes, attachments, and reports you choose to create or uploadcommunications with usanalytics, security, and operational tools used in connection with the ServicesThis Privacy Policy does not apply to third-party products, websites, services, or platforms that may be linked from the Services or integrated with the Services. Those third parties have their own terms and privacy practices.2. Who we areRebutIT is an organizational and documentation tool intended to help users document workplace experiences, upload related materials, and generate structured summaries. RebutIT is not a law firm, is not a substitute for an attorney, and does not provide legal advice, legal representation, or legal opinions.3. Information we collectWe collect information from and about you in several ways.A. Information you provide directlyDepending on how you use the Services, we may collect:name, email address, phone number, username, and passwordaccount profile detailsworkplace details, such as employer name, location, department, title, work type, and related informationnotes, journal entries, incident logs, comments, dates, times, people involved, witness details, and case-related narrativesuploaded files and content, including screenshots, images, documents, PDFs, audio, video, handbook excerpts, policies, pay records, calendars, and related materialssupport requests, feedback, and survey responsesbilling details and subscription information, where applicable, processed by us or our payment processorcommunications you send to usB. Information collected automaticallyWhen you use the Services, we may automatically collect certain technical and usage information, such as:device identifiers and app instance identifiersIP address and general location inferred from IP addressbrowser type, device type, operating system, app version, and language settingscrash reports, diagnostics, error logs, and performance datausage data, such as pages viewed, features used, session events, clicks, interactions, and timestampssecurity-related information needed to detect abuse, fraud, and unauthorized accessC. Information from third partiesWe may receive information from third parties, such as:identity and authentication providerssubscription or payment processorsanalytics, hosting, storage, or communications providersreferral or affiliate partnersthird-party integrations you choose to connectD. Sensitive information and user contentBecause RebutIT is designed to help users document workplace issues, the information you submit may include sensitive personal information or information about other people. For example, user content may include health-related details, leave information, allegations, internal workplace communications, compensation information, demographic information, disciplinary history, or other sensitive material.You are solely responsible for the information you choose to submit, upload, or share through the Services, and for ensuring that you have the rights and permissions necessary to do so.4. How we use informationWe may use information we collect for the following purposes:to provide, operate, maintain, and improve the Servicesto create and manage user accountsto process subscriptions, transactions, and billingto generate reports, summaries, organizational outputs, or AI-assisted content you requestto personalize the user experienceto authenticate users and secure accountsto investigate, prevent, and detect fraud, abuse, misuse, harassment, security incidents, or other harmful or unlawful activityto troubleshoot, test, monitor, and improve performance and functionalityto communicate with you about your account, the Services, updates, support, or administrative mattersto send marketing messages where permitted by law and subject to your choicesto enforce our Terms and other legal rightsto comply with legal obligations, lawful requests, court orders, and regulatory requirementsto protect the rights, property, safety, and security of RebutIT, our users, and othersto create aggregated or de-identified analytics, metrics, and insights, where permitted by law5. AI-assisted featuresRebutIT may use artificial intelligence or machine learning tools to help organize, classify, summarize, or analyze user-submitted content. AI-generated outputs may be inaccurate, incomplete, or unsuitable for legal, employment, medical, financial, or other high-stakes decisions.You should not rely exclusively on AI-generated content and should independently review all outputs before using, sharing, or acting on them.We may use service providers or subprocessors to enable these AI-assisted features. We do not use your content to train third-party public models except as expressly disclosed in this Privacy Policy or with your consent.6. When we disclose informationWe may disclose information in the following circumstances:Service providers and vendors. We may share information with vendors and service providers who perform services on our behalf, such as cloud hosting, storage, analytics, authentication, payments, customer support, security, communications, AI processing, and infrastructure.At your direction. We may share information when you direct us to do so, such as exporting or sharing reports, files, or summaries with attorneys, representatives, or other third parties.Business transfers. We may share or transfer information in connection with a proposed or actual merger, financing, acquisition, bankruptcy, reorganization, dissolution, asset sale, or similar transaction.Legal and safety reasons. We may disclose information where we believe in good faith that disclosure is necessary to comply with the law, enforce our agreements, respond to lawful requests, protect our rights, investigate misuse, or protect the safety of users or others.Aggregated or de-identified data. We may use and disclose data that has been aggregated or de-identified so that it can no longer reasonably identify an individual, subject to applicable law.We do not sell personal information for money. If we engage in data sharing that is considered a "sale" or "sharing" under applicable privacy law, we will provide any required notices and rights.7. Legal bases for processingWhere required by law, we process personal information based on one or more of the following legal bases:performance of a contract with youcompliance with legal obligationslegitimate interests, such as providing and securing the Services, improving functionality, and preventing misuseyour consent, where required8. Cookies and similar technologiesWe and our service providers may use cookies, SDKs, pixels, local storage, and similar technologies to operate the Services, remember preferences, measure engagement, diagnose problems, and support analytics, security, and communications.Where required by law, we will seek consent before using non-essential technologies. You may be able to control certain technologies through your browser, operating system, or device settings.9. Data retentionWe retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain business records, comply with legal obligations, resolve disputes, enforce agreements, and protect against fraud or abuse.Retention periods may vary depending on the type of information, the sensitivity of the data, whether the information is linked to an active account, whether you request deletion, and our legal obligations.If you delete your account, we may retain certain information as required or permitted by law, for backup integrity, fraud prevention, dispute resolution, security, tax, accounting, auditing, and enforcement purposes.10. Data securityWe use reasonable administrative, technical, and organizational measures designed to protect personal information. However, no security measure is perfect, and we cannot guarantee absolute security.Users are responsible for keeping login credentials confidential and for promptly notifying us of suspected unauthorized access or security incidents involving their accounts.11. International transfersWe may store and process personal information in the United States and in other countries where we or our service providers operate. Those countries may have data protection laws that differ from the laws in your jurisdiction.Where required by law, we will implement appropriate safeguards for cross-border transfers.12. Your privacy choices and rightsDepending on where you live, you may have rights regarding your personal information, including the right to:know or access certain information we have collected about yourequest deletion of certain informationrequest correction of inaccurate informationopt out of certain uses or disclosureslimit the use of certain sensitive personal information, where applicableobject to or restrict certain processing, where applicablewithdraw consent, where processing is based on consentappeal a denial of a privacy request, where applicableWe may need to verify your identity before processing certain requests. We may deny or limit a request where permitted by law.To submit a privacy request, contact us at: [contact@rebutit.com].13. California privacy disclosuresIf you are a California resident, you may have rights under California law, subject to exceptions and applicability thresholds. These may include the right to know, delete, correct, opt out of sale or sharing, limit use of sensitive personal information, and not be discriminated against for exercising privacy rights.We may collect the following categories of personal information:identifierscommercial informationinternet or electronic network activity informationgeolocation information derived from IP address or device signalsaudio, electronic, visual, or similar information you upload or provideprofessional or employment-related informationeducation information, where submitted by userssensitive personal information, if voluntarily submitted or necessarily processed in connection with the Servicesinferences drawn from information to create summaries or organizational outputsWe disclose these categories for the business and commercial purposes described in this Privacy Policy.To the extent required by California law, we will honor applicable opt-out preference signals and provide methods for submitting requests.14. Nevada, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana and other U.S. state disclosuresResidents of certain U.S. states may have privacy rights under applicable state privacy laws. The scope of those rights, exemptions, and applicability thresholds vary by state and business activity. We will respond to verified requests as required by applicable law.15. Children's privacyThe Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without appropriate authorization, we will take steps to delete it as required by law.If local law requires a higher age threshold for digital consent, we will apply the higher threshold where applicable.16. Employment, legal, and workplace content disclaimerRebutIT is a tool for organization, documentation, and AI-assisted summarization. RebutIT does not verify the truth, legality, relevance, admissibility, or strategic value of user-submitted content. We do not guarantee that any report, log, exhibit, or output will be accepted by any court, agency, employer, investigator, union, attorney, or other third party.You remain solely responsible for reviewing all content, preserving original evidence, understanding your own legal rights and deadlines, and deciding whether and how to share materials with counsel or others.17. User responsibility for third-party informationIf you submit information about other individuals, including coworkers, managers, witnesses, HR representatives, attorneys, clients, or other third parties, you represent that you have the rights, permissions, or lawful basis needed to provide that information in connection with your use of the Services.You agree not to use the Services to unlawfully collect, publish, dox, threaten, harass, stalk, extort, impersonate, defame, or otherwise misuse information about others.18. Do Not TrackSome browsers offer a "Do Not Track" setting. Because there is not a uniform industry standard for responding to such signals, our response to those signals may vary unless otherwise required by law.19. Third-party services and app storesIf you download the RebutIT app through Apple's App Store or Google Play, your use of those platforms is also governed by their terms, policies, and disclosures. Apple, Google, and other third parties may collect information in connection with app distribution, payments, app analytics, device integrity, or platform operations according to their own privacy notices.20. Changes to this Privacy PolicyWe may update this Privacy Policy from time to time. When we do, we will revise the Effective Date or Last Updated date above. If we make material changes, we may provide additional notice where required by law.21. Contact usIf you have questions about this Privacy Policy or would like to submit a privacy request, contact us at:RebutIT [BlckLux LLC] [contact@rebutitnow.com] 310-531-0282