Privacy Policy

Effective Date: May 19, 2026 | Last Revised: May 19, 2026

1. Introduction and Scope

Rebel Audio LLC ("Rebel Audio," "we," "us," or "our") operates an AI-powered audio and podcast Software-as-a-Service platform that includes recording, transcription, editing, voice cloning, audio enhancement, content distribution, and related tools (collectively, the "Services"). The Services are intended for use within the United States. We are committed to protecting the privacy and security of all individuals who interact with our Services.

This Privacy Policy explains how we collect, use, store, share, and protect information about:

Registered users and account holders ("Users")
Guests and invitees who participate in recorded sessions without holding an account ("Guests")
Visitors to our website(s) and marketing pages ("Visitors")
Business customers and their authorized personnel under enterprise or API agreements ("Business Customers")

This Policy applies to all Rebel Audio products and services, including but not limited to: the Rebel Audio web application, mobile applications, desktop applications, browser extensions, API services, AI Credits billing system, voice cloning features, podcast hosting and distribution tools, and any related integrations or partner services.

By accessing or using the Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, you must discontinue use of the Services immediately.

2. Information We Collect

2.1 Information You Provide Directly

Account Registration: When you create an account, we collect your name, email address, password (stored in hashed form), company or organization name (if applicable), and any profile information you choose to add.

Billing and Subscription Information: When you purchase a subscription or AI Credits, we collect payment method details processed through our third-party payment processor(s) (e.g., Stripe). We do not store full credit card numbers on our systems. We retain transaction records including subscription tier, AI Credits purchased and consumed, billing dates, renewal history, and billing address.

Audio, Video, and Content Uploads: When you use the Services to record, upload, or process content, we receive and store audio recordings, video recordings (if applicable), transcripts, edited media files, show notes, metadata, and any content associated with your projects.

Communications: If you contact our support team or communicate with us via email, chat, or other channels, we collect the content of those communications and associated metadata.

User-Generated Settings and Preferences: Custom configurations, project names, tags, templates, and workflow preferences you create within the platform.

2.2 Voice and Biometric Data

Due to the nature of our Services, we collect and process certain categories of biometric and voice data, including:

Voice recordings uploaded or captured through the platform
Voice prints generated for speaker identification and transcription
AI Voice models created through our voice cloning features ("AI Voices")
Speaker diarization data (distinguishing between speakers in a recording)

Specific to Voice Cloning / AI Voice Features: To create an AI Voice, you must provide explicit written consent through our consent verification process. You represent and warrant that (a) you have the legal right to create an AI Voice model of any voice submitted, and (b) you have obtained the express consent of any third party whose voice is being cloned.

AI Voice models are associated with your account. By using the Services, you grant Rebel Audio a license to use your content (including AI inputs and outputs) for AI model training and service improvement, as described in Section 3.6. You may opt out of AI training at any time through the procedures described in our Terms of Service (Section 7.1).

Rebel Audio retains voice print data and AI Voice models for the duration of your account and for thirty (30) days following account deletion, after which it is permanently deleted.

We do not sell voice prints or AI Voice models to third parties for any purpose. Voice profile data may be shared in anonymized and aggregated form with advertising partners as described in Section 4.1.

2.3 Automatically Collected Information

When you use the Services, we automatically collect:

Device and technical identifiers: IP address, device type, operating system, browser type and version, unique device identifiers
Usage data: pages or features accessed, session duration, click events, mouse movements, scrolling behavior, user interface interactions within the Rebel Audio application, error logs, feature usage patterns, AI Credits consumption logs
Log data: server logs, timestamps, referring URLs, exit pages
Location data: general geographic location derived from IP address (city/country level); we do not collect precise GPS location unless you affirmatively enable a feature requiring it
Cookies and tracking technologies: as described in Section 7 of this Policy

2.4 Information About Guests and Third-Party Participants

When a User invites a Guest to participate in a recording session, Rebel Audio may collect the Guest's name, email address (if provided), audio and video content from the session, and voice prints for transcription purposes. Guests who do not have a Rebel Audio account are subject to this Privacy Policy with respect to data collected during and relating to their participation.

Users are responsible for obtaining any consents required by applicable law from Guests and other participants before initiating recordings. Users represent and warrant they have done so.

2.5 Information from Third-Party Integrations

If you connect third-party services to your Rebel Audio account (such as podcast distribution platforms, RSS services, calendar applications, or cloud storage providers), we may receive information from those services as authorized by you. The scope of data received is governed by your permissions settings with those third parties.

2.6 Information from Business Customers (B2B Context)

Where Rebel Audio is engaged by a Business Customer to provide Services to that customer's end users or employees, we act as a data processor on behalf of the Business Customer (the data controller). In that context, our collection and processing of end-user data is governed by the Business Customer's privacy policy and our Data Processing Agreement (DPA). Please review your employer's or organization's privacy policy if you are accessing Rebel Audio through a Business Customer account.

3. How We Use Your Information

3.1 Providing and Improving the Services

Operate, maintain, and deliver the Services and their features
Process and fulfill AI Credits transactions and subscription management
Generate transcripts, perform audio enhancement, and deliver AI-powered features
Enable voice cloning, speaker identification, and related AI audio tools
Store and make your content accessible across devices and sessions
Provide customer support and respond to your inquiries
Diagnose technical issues and monitor platform health and security

3.2 AI Credits and Usage-Based Billing

Our platform uses a proprietary AI Credits system to meter usage of AI-powered features. We process your AI Credits balance and consumption data to:

Track feature usage in real time and deduct credits accordingly
Notify you of low balance thresholds and renewal events
Process top-up purchases and subscription renewals
Generate usage statements and billing history
Detect and prevent abuse or fraudulent activity

Rebel Audio complies with the FTC's "Click-to-Cancel" rule and applicable state auto-renewal statutes (including California and New York requirements). You may cancel your subscription or auto-renewal at any time through your account settings or by contacting us. Unused AI Credits are subject to the expiration and refund policies set forth in our Terms of Service.

3.3 Communications

Send transactional emails (account confirmation, billing receipts, password reset, usage alerts)
Send service announcements and critical security or policy notices
With your consent, send marketing communications, product updates, and promotional offers

3.4 Analytics and Platform Improvement

We use aggregated, de-identified usage data to understand how the Services are used, identify areas for improvement, develop new features, and produce internal analytics and reporting. De-identified data used for analytics cannot reasonably be used to identify individual users.

3.5 Legal Compliance and Safety

Comply with applicable laws, regulations, court orders, or lawful government requests
Enforce our Terms of Service and other agreements
Investigate potential violations or fraudulent activity
Protect the rights, property, and safety of Rebel Audio, our users, and the public

3.6 AI Model Training — Opt-Out Available

By using the Services, you grant Rebel Audio a perpetual, worldwide, royalty-free, sublicensable, irrevocable, non-exclusive license to use, copy, store, modify, reproduce, and distribute your User Content (including AI inputs and outputs) to provide the platform, conduct research and development, and improve Rebel Audio's services and its third-party AI providers' services, as set forth in Section 5.4 of the Terms of Service. You may opt out of having your User Content used for AI model training purposes by following the opt-out procedures in Section 7.1 of the Terms of Service within ten (10) days of first accepting the Terms or within ten (10) days of the launch of any new feature to which opt-out rights apply.

Unless you have opted out of AI training pursuant to Section 7.1 of the Terms of Service:

We may use de-identified audio and transcript data to improve our transcription accuracy, noise reduction, and AI features.
Voice cloning models and voice prints are never used for general AI training under any circumstances, regardless of opt-out status.

You may opt out by providing written notice to Rebel Audio at opt-out@rebelaudio.ai within ten (10) days of first accepting the Terms of Service or within ten (10) days of the launch of any new feature to which opt-out rights apply, in accordance with Section 7.1 of the Terms of Service, or through your account settings. Opt-out applies prospectively to User Content created or uploaded after the effective date of the opt-out; data already incorporated into trained models cannot be retroactively removed without re-training.

We do not share training data with third-party AI providers for their own model improvement. Any third-party AI subprocessors we use for backend inference are contractually prohibited from training on your data.

4. How We Share Your Information

4.1 Data Sharing and Monetization

By using the Services, you consent to Rebel Audio's collection, use, and sharing of your data as described in this Privacy Policy and the Terms of Service, to the fullest extent permitted by applicable law. Rebel Audio may share anonymized and aggregated user data, engagement data, and voice profile data with third-party advertisers, brands, and advertising agencies for the purpose of facilitating brand partnerships and advertising opportunities within the Rebel Audio ecosystem, as described in Section 8.2 of the Terms of Service. Rebel Audio does not sell individually identifiable personal information (such as your name, email address, or payment details) to third parties for their own independent marketing purposes. We do not sell voice prints or AI Voice models to third parties. For California residents: to the extent any sharing of data described herein constitutes a "sale" or "sharing" under the CCPA/CPRA, you may exercise your right to opt out by contacting us at privacy@rebelaudio.ai.

4.2 Service Providers and Subprocessors

We engage trusted third-party service providers to assist in operating and improving the Services. These providers are contractually required to use your data only to perform services on our behalf and in accordance with this Privacy Policy. Categories of service providers include:

Cloud infrastructure and storage providers (e.g., AWS, Google Cloud)
Payment processors (e.g., Stripe)
AI and machine learning infrastructure providers used for transcription, speech recognition, and audio processing
Analytics and monitoring services
Customer support and communication platforms
Email delivery services
Security and fraud prevention services

A current list of our third-party subprocessors is available at our Subprocessors page. We will update this list when we add or remove subprocessors and provide thirty (30) days advance notice of material changes.

4.3 Business Customers

If you access Rebel Audio through a Business Customer account, we may share your usage data, content, and account information with that Business Customer to the extent permitted by our agreement with them and as instructed by them as the data controller.

4.4 Sharing with Your Authorization

We share your content or account information with third parties when you explicitly direct us to do so, such as when you use our integrations, publish content to distribution platforms, or share a project link.

4.5 Legal Requirements and Protection of Rights

We may disclose information if we believe in good faith that disclosure is necessary to: (a) comply with applicable law, regulation, legal process, or enforceable governmental request; (b) enforce our Terms of Service; (c) detect, prevent, or address fraud, security, or technical issues; or (d) protect against harm to the rights, property, or safety of Rebel Audio, our users, or the public.

We will notify affected users of legal demands for their data to the extent permitted by law and will seek to limit or challenge overly broad requests.

4.6 Business Transfers

In the event of a merger, acquisition, asset sale, financing, or other corporate transaction, your information may be transferred as part of that transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

4.7 Aggregated and De-Identified Data

We may share aggregated, de-identified data that cannot reasonably be used to identify you with partners, researchers, or for industry reporting purposes.

5. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law. Our general retention principles are:

Account data is retained for the life of your account and for thirty (30) days following account deletion, after which it is permanently deleted or anonymized, except to the extent a longer retention period is required by applicable law or necessary for Rebel Audio to comply with its legal obligations, resolve disputes, or enforce its agreements.
Audio recordings, video recordings, transcripts, and project files are retained for the duration of your account. Upon account deletion, such content is permanently deleted within thirty (30) days, except to the extent a longer retention period is required by applicable law. If you delete specific content prior to account deletion, it is removed from active systems within thirty (30) days.
Voice prints and AI Voice models are deleted within thirty (30) days of account deletion or upon your request.
Billing records and transaction logs are retained for seven (7) years as required for accounting and tax compliance.
Legal hold: If your account is subject to a legal hold or pending litigation, data will be preserved as required regardless of the above timelines.

6. Data Security

Rebel Audio implements technical, administrative, and physical safeguards designed to protect your information from unauthorized access, disclosure, alteration, and destruction. Our security measures include:

Encryption of data in transit using TLS 1.2 or higher
Encryption of data at rest using AES-256
Access controls and role-based permissions for employee access to user data
Multi-factor authentication requirements for internal systems
Regular security assessments and penetration testing
Incident response procedures and breach notification protocols

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at security@rebelaudio.ai.

7. Cookies and Tracking Technologies

We use cookies and similar technologies (web beacons, pixel tags, local storage) to operate and improve the Services, understand usage, and provide relevant communications. Categories of cookies we use:

Strictly Necessary Cookies: Essential for authentication, session management, and core platform functionality. These cannot be disabled.
Functional Cookies: Remember your preferences and settings to enhance your experience.
Analytics Cookies: Help us understand how users interact with the Services (e.g., Google Analytics). This data is aggregated and used to improve the platform.
Marketing Cookies: Used to deliver relevant advertising and measure campaign effectiveness. These are only placed with your consent.

You can manage cookie preferences through our Cookie Consent Manager, your browser settings, or opt-out tools provided by third-party analytics providers. Note that disabling certain cookies may impact functionality.

8. Your Privacy Rights

8.1 Rights Available to All Users

Regardless of your location, you have the right to:

Access the personal information we hold about you
Correct inaccurate information in your account
Delete your account and associated personal data (subject to legal retention obligations)
Export a copy of your content in a portable format
Opt out of marketing communications at any time
Opt out of AI training data use by providing written notice to opt-out@rebelaudio.ai within ten (10) days of first accepting the Terms of Service or within ten (10) days of the launch of any new feature to which opt-out rights apply, or through your account settings

To exercise these rights, contact us at privacy@rebelaudio.ai or through your account settings dashboard.

8.2 California Residents (CCPA/CPRA)

California residents have the following additional rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act:

Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes for collecting it, and the categories of third parties we share it with.
Right to Delete: Request deletion of personal information we have collected, subject to certain exceptions.
Right to Correct: Request correction of inaccurate personal information.
Right to Opt-Out of Sale or Sharing: To the extent Rebel Audio's sharing of anonymized and aggregated data with advertising partners (as described in Section 4.1) constitutes a "sale" or "sharing" under the CCPA/CPRA, you may direct us to stop such sharing by contacting us at privacy@rebelaudio.ai. Rebel Audio does not sell individually identifiable personal information or share personal information for cross-context behavioral advertising.

We honor Global Privacy Control (GPC) browser signals as a valid opt-out of sale or sharing request where required by applicable law.

Right to Limit Use of Sensitive Personal Information: You may direct us to limit use of sensitive personal information (including biometric data and voice prints) to what is necessary to provide the Services.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To submit a verifiable consumer request, contact us at privacy@rebelaudio.ai. We will respond within 45 days (extendable by 45 days with notice). We do not charge a fee for requests unless they are manifestly unfounded or excessive.

8.3 Virginia, Colorado, Texas, and Other U.S. State Residents

Residents of states with comprehensive privacy laws (including Virginia VCDPA, Colorado CPA, Texas TDPSA, Connecticut CTDPA, and others) have rights including access, correction, deletion, portability, and the right to opt out of targeted advertising and profiling. To exercise these rights, contact us at privacy@rebelaudio.ai. We will respond within the timeframe required by applicable law.

8.4 Biometric-Specific Rights (Illinois, Texas, Washington)

If you are a resident of Illinois, Texas, or Washington, additional rights apply to the collection and use of biometric identifiers and information, including voice prints:

We will not collect, capture, or otherwise obtain biometric information without first providing written notice and obtaining written release (or, for Illinois residents, a written release executed by the subject).
We will not sell, lease, trade, or otherwise profit from biometric data.
We will not disclose or disseminate biometric data without consent or legal requirement.
Biometric data will be retained only as long as the initial purpose for collection remains and will be permanently deleted within three (3) years of the individual's last interaction with the Services or within one (1) year after the purpose for collection has been satisfied, whichever is first (consistent with the Illinois BIPA standard).

8.5 Authorized Agents

You may designate an authorized agent to submit a privacy rights request on your behalf. If you use an authorized agent, we may require that you: (a) provide the agent with signed, written permission or a valid power of attorney; and (b) verify your own identity directly with us. We may deny a request from an agent that does not submit adequate proof of authorization. Please do not provide sensitive personal information (such as a government-issued ID) in connection with an authorized agent request unless specifically requested by us through a secure channel. Authorized agents may submit requests by contacting us at privacy@rebelaudio.ai.

8.6 Nondiscrimination

We will not discriminate against you for exercising any of your privacy rights under applicable law. We will not deny you goods or services, charge you different prices, provide you a different level or quality of service, or suggest that you will receive a different level of service as a result of exercising your privacy rights.

8.7 Appeal Rights

If we deny your privacy rights request in whole or in part, you may appeal our decision by contacting us at privacy@rebelaudio.ai with the subject line "Privacy Rights Appeal." We will respond to your appeal within the timeframe required by applicable law. If you are not satisfied with our response to your appeal, you may contact your state attorney general or the applicable data protection supervisory authority.

9. Children's Privacy

The Services are not directed to children under the age of 13 and we do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without appropriate consent, we will take steps to delete it promptly. If you believe a child has provided us with personal information, contact us at privacy@rebelaudio.ai.

10. Third-Party Websites and Integrations

The Services may contain links to third-party websites, integrations, or services not operated by Rebel Audio. This Privacy Policy does not apply to those third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you access through our platform.

11. International Data Transfers

Rebel Audio is based in the United States and processes and stores information in the U.S. If you access the Services from outside the United States, your personal data may be transferred to, stored in, and processed in the United States or other jurisdictions that may not provide equivalent levels of data protection as your home jurisdiction. We take steps to ensure that your personal data receives an adequate level of protection in the jurisdictions in which we process it, including by implementing appropriate safeguards such as Standard Contractual Clauses approved by the European Commission or other transfer mechanisms recognized under applicable law.

11.1 Users in the European Economic Area, United Kingdom, and Switzerland

If you are located in the European Economic Area ("EEA"), the United Kingdom, or Switzerland, we process your personal data in reliance on the following legal bases, as applicable: (a) performance of our contract with you (e.g., to provide the Services and process your transactions); (b) our legitimate interests (e.g., to operate, improve, and secure our Services, and to send service-related communications), provided these are not overridden by your data protection rights; (c) compliance with our legal obligations; and (d) your consent, where applicable, which you may withdraw at any time by contacting us at privacy@rebelaudio.ai.

Subject to certain limitations under applicable law, you have the right to: access personal data we hold about you; request correction, erasure, or portability of your personal data; restrict or object to certain processing; and withdraw consent where processing is based on consent. To exercise these rights, contact us at privacy@rebelaudio.ai.

If you have a concern about our processing of personal data that we are unable to resolve, you have the right to lodge a complaint with the data protection authority in the jurisdiction where you reside. For individuals in the EEA, contact details for your Data Protection Authority can be found at https://edpb.europa.eu/about-edpb/board/members_en. For individuals in the UK, contact the Information Commissioner's Office at https://ico.org.uk/global/contact-us/.

12. AI-Specific Disclosures

12.1 Automated Processing and AI-Powered Features

Our Services use artificial intelligence and machine learning for transcription, speaker identification, noise reduction, content summarization, voice synthesis, and other features. These systems process your audio and content to deliver results. Automated processing does not constitute a "decision" that produces significant legal or similarly significant effects on you.

12.2 AI Credits System

AI Credits are Rebel Audio's proprietary unit for metering AI feature usage. Credits are consumed when you use AI-powered features. Key terms governing AI Credits are set forth in our Terms of Service, including purchase, consumption, expiration, and refund policies. Your AI Credits balance and usage history are stored as account data subject to this Privacy Policy.

12.3 Third-Party AI Subprocessors

Certain AI features may utilize third-party AI infrastructure providers for backend processing (e.g., speech recognition APIs). Any such providers are designated as subprocessors and are contractually bound to: (a) process your data only to deliver the contracted service; (b) not train their AI models on your data; (c) maintain confidentiality; and (d) comply with applicable data protection law. See our Subprocessors page for current providers.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by: (a) posting the updated Policy at www.rebelaudio.ai/privacy with a new effective date; (b) sending an email to your registered address; and/or (c) displaying a prominent notice in the application. Your continued use of the Services after the effective date of changes constitutes acceptance of the updated Policy.

For material changes affecting how we use biometric data, voice prints, or AI Voice models, we will obtain renewed consent before the new practices take effect.

14. Contact Information

For questions, requests, or concerns about this Privacy Policy or our data practices, contact us at:

Rebel Audio LLC
Attn: Privacy & Legal
Email: privacy@rebelaudio.ai

Appendix A: Data Categories and Purposes Summary

The following summarizes the categories of personal data Rebel Audio processes and the primary purposes:

Account Identifiers (name, email, password hash) — Account creation and authentication
Billing and Transaction Data — Payment processing, AI Credits management, legal compliance
Audio Recordings and Media Files — Delivery of Services, storage, playback
Transcripts — Service delivery, searchability, export features
Voice Prints — Speaker identification; AI Voice models upon consent
AI Voice Models — Voice synthesis features upon user consent
Usage and Analytics Data — Service improvement, fraud prevention, billing
IP Addresses and Device Data — Security, compliance, analytics
Communications — Support, legal compliance

Appendix B: State-by-State Compliance Index

The following state laws are specifically addressed in or implicated by this Policy:

California: CCPA/CPRA (Section 8.2); Shine the Light Law; CalOPPA
Illinois: BIPA — Biometric Information Privacy Act (Sections 8.4, 2.2)
Texas: TDPSA (Section 8.3); Texas CUBI (Section 8.4)
Washington: My Health MY Data Act (Section 8.4); Washington Privacy Act
Virginia: VCDPA (Section 8.3)
Colorado: CPA (Section 8.3)
Connecticut: CTDPA (Section 8.3)
New York: SHIELD Act; NY auto-renewal law