Privacy Policy

    Last Updated: May 16, 2025

    1. Information We Collect

    We collect information you provide directly, such as your name, email address, phone number, and payment information when you create an account or subscribe to our services. We also collect usage data automatically, including IP address, browser type, pages visited, time spent, and referring URLs. When you link a brokerage account, we may receive account identifiers and portfolio data necessary to provide our services.

    2. How We Use Your Information

    We use your information to: provide and maintain our Services; process transactions and send related information; send you technical notices, updates, and support messages; respond to your comments and questions; analyze usage patterns to improve our platform; detect, prevent, and address technical issues or fraud; and comply with legal obligations.

    3. Cookies and Tracking Technologies

    We use cookies, local storage, and similar technologies to recognize your browser, remember your preferences, and understand how you use our Sites. You can control cookies through your browser settings. We use essential cookies for site functionality, analytics cookies to understand usage (e.g., page views and session duration), and preference cookies to remember your settings. Third-party services such as Stripe (payments) may also set cookies on our behalf.

    4. Information Sharing and Disclosure

    We do not sell your personal information. We may share information with: service providers who assist in operating our platform (e.g., payment processors, email providers, hosting services); professional advisors such as lawyers and accountants; law enforcement or government agencies when required by law; and in connection with a merger, acquisition, or sale of assets. We may share aggregated, de-identified data that cannot reasonably be used to identify you.

    5. Data Retention

    We retain your personal information for as long as your account is active or as needed to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements. When you close your account, we will delete or anonymize your personal data within 90 days unless legally required to retain it.

    6. Data Security

    We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, access controls, and regular security audits. However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

    7. Your Rights (CCPA / GDPR)

    Depending on your jurisdiction, you may have the right to: access the personal information we hold about you; request correction of inaccurate data; request deletion of your personal data; object to or restrict certain processing; data portability (receive your data in a structured format); and withdraw consent at any time. California residents may request disclosure of categories of personal information collected and the business purposes for collection. To exercise any of these rights, contact us at privacy@marketrebellion.com.

    8. Children's Privacy

    Our Services are not directed to individuals under 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

    9. Third-Party Links

    Our Sites may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

    10. Changes to This Policy

    We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our Sites and updating the "Last Updated" date. Your continued use of our Services after changes constitutes acceptance of the updated policy.

    11. Contact Us

    If you have questions about this Privacy Policy or our data practices, contact us at: Market Rebellion, LLC Email: privacy@marketrebellion.com Phone: 1 (888) 982-8342 Monday–Friday, 9:00 AM – 6:00 PM ET

    12. AI Data Handling, Training Opt-Out & Retention

    We use third-party AI providers (Anthropic, OpenAI, Google) exclusively through their commercial API tiers. By contract, these providers do not use your prompts, code, or business data to train their foundation models. The current posture below — including default retention windows, Zero Data Retention (ZDR) coverage, and signed Data Processing Agreements — is incorporated by reference into this Privacy Policy and forms a binding part of our commitments to you.

    Posture version 2026.05.01 — effective 2026-05-01. Updates are versioned and timestamped; download the attestation PDF below for the version in force at any point in time.

    Anthropic

    Claude Sonnet, Claude Opus (API tier)

    No training
    ZDR available
    Default retention
    30 days
    Data residency
    United States
    DPA
    Signed
    SOC report
    SOC 2 Type II

    ZDR active for

    War Room intake • Member PII flows • KYC review assistance

    API customer data is not used to train Anthropic models per Commercial Terms §B.

    OpenAI

    GPT-5, GPT-5 mini, GPT-5 nano (API tier)

    No training
    ZDR available
    Default retention
    30 days
    Data residency
    United States
    DPA
    Signed
    SOC report
    SOC 2 Type II

    ZDR active for

    Support ticket triage with PII • Sales call transcript review

    Business/API data is not used to train OpenAI models per Business Terms §3.

    Google

    Gemini 2.5 Pro/Flash, Gemini 3 Pro/Flash preview

    No training
    ZDR available
    Default retention
    30 days
    Data residency
    United States
    DPA
    Signed
    SOC report
    SOC 2 Type II

    ZDR active for

    Regulated content review on request

    Vertex AI / Gemini API customer data is not used to train Google models.

    Rebel AI Gateway

    Routed transparently to providers above

    No training
    ZDR available
    Default retention
    No payload retention
    Data residency
    United States
    DPA
    Signed
    SOC report
    In-progress

    ZDR active for

    Gateway itself stores no prompt/response payloads

    Gateway forwards requests; logs only metadata (model, tokens, status), never payloads.

    Statements of Posture

    1. 1.No customer prompts, code, or business data is used to train any third-party AI foundation model.
    2. 2.All AI invocations occur via provider APIs operating under signed Data Processing Agreements (DPAs).
    3. 3.Default provider retention is 30 days for Trust & Safety review only; no human review in the absence of a flagged abuse incident.
    4. 4.Zero Data Retention (ZDR) endpoints are enabled for War Room intake, KYC review assistance, and any flow handling PII or material non-public information.
    5. 5.Every AI invocation is logged to an internal audit table (admin-only access) capturing provider, model, retention policy, and data classification.
    6. 6.API credentials are stored in an encrypted secret vault and rotated on demand. No keys reside in source code, browser storage, or logs.
    7. 7.All processing occurs in United States data centers. No customer data is transferred outside the US.
    8. 8.This posture is published at https://marketrebellion.ai/privacy-security and reaffirmed in our Privacy Policy.