rabbit

privacy policy

Last Updated: April 22, 2024

rabbit inc. (“rabbit,” “we,” “our,” and/or “us”) values the privacy of those who use our products, including our website(s) (each, the “Website”), the rabbit r1 (“r1”), and related services (collectively, our “Services”). This privacy policy (the “Privacy Policy” or “Policy”) explains how we collect, use, and share personal information about users of our Services (“Users,” “you” or “your”).

Before using our products or services, please read and thoroughly understand this Privacy Policy. You shall not continue to use the relevant products or services until and unless your full understanding of this Policy is confirmed. Once you start to use our products or services, it shall deem that you have fully understood and agreed to this Policy and any update thereof and have agreed that we may collect, use, save, and share your relevant information in accordance with this policy.

Information We Collect

We may collect a variety of information from or about you or your devices from various sources, as described below.

  1. Information You Provide to Us.

    1. Registration Information. If you register to use our Services, sign up for notifications or updates, or participate in our surveys, we ask you for your name, email address, mobile telephone number, physical address, and other contact details. When you register your r1, you also may choose to provide additional information to facilitate your use of r1, including:

      1. Authorization credentials for your accounts on third-party services you choose to enable on your r1 such as music and photo services;
      2. Contact lists, including contact lists you import from third-party services or apps;
      3. Fitness and wellness information, such as age, weight, height, wellness goals, and nutrition/dietary information. We are working to develop features to help support your wellness goals. These features are not yet available, but you can choose to opt in and provide any of the details.
    2. Communications. If you contact us directly, we may receive additional information about you that you provide, such as your name, email address, phone number, the contents of a message or attachments that you may send to us, and other information you choose to provide. When we send you emails, we may track whether you open them to learn how to deliver a better customer experience and improve our Services.
    3. Order information. If you make a purchase through our Services, we may collect information about your order, such as name, email address, mailing address, phone number, order history, payment information, and other information you choose to provide.
    4. Input. If you use functions made available by r1, we may collect information about your input such as your chat input, photos, videos, or any other content provided to r1 for processing purpose.
    5. Careers. If you decide that you wish to apply for a job with rabbit, you may submit your contact information and your resume online. We will collect the information you choose to provide on your resume, such as your education and employment experience. You may also apply through LinkedIn and similar websites. If you do so, we will collect the information you make available to us on LinkedIn and similar websites.
  2. Information We Collect When You Use Our Services.

    1. Location Information. When you use our Services, we infer your general location information, for example by using your internet protocol (IP) address used to access our website. When you use r1, we collect and use precise geolocation data (e.g., using GPS, Wi-Fi and Bluetooth signals, and other device information) to support the Services provided or otherwise made available to you in connection with r1.
    2. Device Information. We receive information about the device and software you use to access our Services, including IP address, web browser type, operating system version, phone carrier and manufacturer, device identifiers and similar information.
    3. Usage Information. To help us understand how you use our Services and to help us improve them, we automatically receive information about your interactions with our Services, like the pages or other content you view, the searches you conduct (e.g., on our website or on r1), the activities you perform (such as log details from calls and texts using r1), and the dates and times of your activities.
    4. Photo, Video, Audio, and Communications Information. When you use r1 to create photos, videos, audio recordings, or communications (e.g., text messages), or when you use the r1 for features that use images or audio, our Services collect this content, including associated metadata.
  3. Information from Cookies and Similar Technologies. We and our third-party partners collect information using cookies, pixel tags, or similar technologies when you use the Services.

    Please review your web browser’s “Help” file to learn how to modify your cookie settings. Please note that if you delete or choose not to accept cookies from the Services, you may not be able to utilize the features of the Services to their fullest potential.

  4. Information We Receive from Third Parties.

    1. Third-Party Partners. When you use r1, we may receive information about you from third-party services that you have engaged in connection with your use of r1. For example, we may receive information about you from the third-party telecom provider that supports your r1. You also may have the option of creating accounts with certain third-party services and enabling those services on your r1 (“Experiences”), and we may receive information about you from those third-party services. For example, if you choose to integrate your r1 with your Google account, we will receive your personal contacts data from your Google account via Google APIs in order to enable communication between you and your personal contacts. All such data is stored in encrypted format on our servers and subject to access control measures. rabbit’s use and transfer to any other service of information received from Google’s APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
    2. Other third parties. We may receive additional information about you, such as demographic data, from third parties such as data or marketing partners and combine it with other information we have about you.

Legal Basis for Processing Your Personal Data

The lawful basis varies depending on the specific use of the personal data by us. Our legal basis for processing your personal data may include:

  • Performance of Contracts. We may process your personal data when providing services or communicating with you about services, including creating or maintaining your account, processing your orders and payments, and providing customer services.
  • Legitimate Interests. However, we will refrain from using your personal data if, after careful consideration, we believe that our use of your personal data will harm your interests or your fundamental rights and freedoms associated with your personal data. We may use your personal data to, for example, improve our services, e.g. optimize functionality, analyses performance, fix bugs; marketing communications; and detect and prevent fraud to protect the safety of our customers, ourselves, or others, and when we recommend features, products, and services that may be of interest to you, also to determine your preferences and personalize your experience with the service.
  • Your Consent. We will seek your consent when we process your personal data for a specific purpose you will be informed of. If you have given us your consent to processing your personal data for a particular purpose, you may withdraw your consent at any time and we will no longer process your personal data for that purpose.
  • Compliance with Legal Obligations. We may use your personal data to comply with applicable laws, regulations, lawful requests, or legal proceedings (e.g., to respond to requests from government authorities); to protect your rights, privacy, safety, or property and the rights, privacy, safety, or our property and other users (including to make or defend claims); or to prevent, identify, investigate, and stop fraudulent, unauthorized, unethical, or illegal activities, including cyber-attacks and identity theft.

How We Use the Information We Collect

We use the information we collect:

  • To provide you with the Services and fulfill your requests, such as to provide, maintain, improve, and enhance our Services; to fulfill your requests, such as processing an order for products or services; to provide technical and customer support; to communicate with you, provide you with updates and other information relating to our Services, including administrative information regarding changes to our terms, conditions, and policies; and to provide information that you request and respond to comments and questions. If you choose not to provide certain data, the quality, and functionalities of the Services we provide to you may be impacted.
  • To provide you with a personalized experience, such as to understand your interests and preferences in order to personalize our interactions with you.
  • For marketing and advertising purposes, such as sending you promotional and advertising materials, consistent with your choices.
  • For legal, safety or security reasons, such as to find and prevent fraud, and respond to trust and safety issues that may arise.
  • For compliance purposes, including enforcing our Terms of Service or other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency.
  • For our own internal business purposes, such as to understand and analyze how you use our Services, improve the Services, and develop new products, services, features, and functionality; and generate de-identified or aggregated data.
  • Other, for other purposes for which we provide specific notice at the time the information is collected.

How We Disclose the Information We Collect

We disclose personal information in operating our business, as described below. For clarity, we never sell your personal information to data brokers.

  • Vendors and Service Providers. We may share any information we receive with vendors and service providers retained in connection with the provision of our Services. These can include providers of services such as website hosting, data analysis, order fulfillment, fraud prevention, information technology, customer service, marketing delivery, functionality for r1, and other services. For example, we use Shopify to operate our online store. You can learn more about Shopify’s practices by visiting https://www.shopify.com/legal/privacy.
  • Third-Party Partners. We may share personal information with third-party business partners in connection with your use of the Services, which may include the telecom provider that supports your r1, third parties providing Experiences you have enabled on your r1, and other third parties that provide services that you choose to use on your r1.
  • Analytics and Advertising Partners. To enhance your experience using our website, we collaborate with specialized companies in analytics and advertising. These companies utilize technologies like cookies and pixel tags to gather insights about your online interactions over time, spanning our website and third-party websites you visit.

    Our aim is to understand and improve how you engage with our website. For this, we automatically gather details about your interactions with our website, such as the pages and content you view, your searches, and the timing of your visits. We use tools like Google Analytics to collect and process this data. You can learn about Google’s practices by visiting Google’s privacy partners page and you can exercise the opt-out provided by Google at Google Analytics opt-out add-on.

    Additionally, we may also engage with third-party advertisers to show you relevant ads on our website and third-party websites, including social media sites, based on your website usage. This targeted approach helps us connect with those most likely interested in our products. For more information about these practices and your choices, you can visit NAI’s opt-out page and the DAA’s opt-out page. We strive to prioritize your privacy and to create the best shopping experience without compromising your personal data. As a privacy-first company, we work hard to provide an experience with our products that remains both enjoyable and secure.

  • As Directed by You. r1 may provide functionality allowing you to export or otherwise transfer photos or certain other data to your accounts on third-party services.
  • As Required by Law and Similar Disclosures. We may access, preserve, and disclose your information if we believe doing so is required or appropriate to: (a) comply with law enforcement requests and legal process, such as a court order or subpoena; (b) respond to your requests; or (c) protect your, our, or others’ rights, property, or safety. For the avoidance of doubt, the disclosure of your information may occur if you post any objectionable content on or through the Services.
  • Merger, Sale, or Other Asset Transfers. We may transfer your information to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell, liquidate, or transfer all or a portion of our assets. The use of your information following any of these events will be governed by the provisions of this Privacy Policy in effect at the time the applicable information was collected.
  • Consent. We may also disclose your information with your permission. For example, for purposes of California Civil Code Section 1798.83 (known as the “Shine the Light” law), we do not disclose personal information, as defined by California Civil Code § 1798.83, to unaffiliated third parties for their direct marketing purposes without your consent.

Your Choices

We offer you a number of choices with respect to the processing of your information:

  • Marketing Communications. You can unsubscribe from our promotional emails via the link provided in the emails. Even if you opt-out of receiving promotional messages from us, you will continue to receive administrative messages from us.
  • Do Not Track. There is no accepted standard on how to respond to Do Not Track signals, and we do not respond to such signals.
  • Updating Your Personal Information: If you would like to update the personal information you have provided to us, please send us your request using the contact details in the Contact Information below.

Third Party Services

Our Services may contain links to other websites, products, or services that we do not own or operate. We are not responsible for the privacy practices of these third parties, or the privacy practices of third-party providers of experiences that you may choose to use on your r1. Please be aware that this Privacy Policy does not apply to your activities on these third-party services or any information you disclose to these third parties. We encourage you to read their privacy policies before providing any information to them.

Security

We make reasonable efforts to protect your information by using physical and electronic safeguards designed to improve the security of the information we maintain. However, as no electronic transmission or storage of information can be entirely secure, we can make no guarantees as to the security or privacy of your information. If you have reason to believe that your account or interaction with us is no longer secure, please contact us immediately using the details in the “Contact Information” section below.

Retention Period

We retain Personal Information for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with applicable law.

The criteria used to determine our retention periods include:

  • The length of time we have an ongoing relationship with you and provide the Services to you (for example, for as long as you have an account with us or keep using the Services);
  • Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them); or
  • Whether retention is necessary in light of our legal position (such as in regard to applicable statutes of limitations, litigation, or regulatory investigations).

Children’s Privacy

We do not knowingly collect, maintain, or use personal information from children under 18 years of age, and no part of our Services are directed to children. If you learn that a child has provided us with personal information in violation of this Privacy Policy, then you may alert us at support@rabbit.tech.

International Visitors

Our Services are hosted in the United States. If you choose to use Services from the European Union or other regions of the world with laws governing data collection and use that may differ from U.S. law, then please note that you are transferring your personal information outside of those regions to the United States for storage and processing. Also, we may transfer your data from the U.S. to other countries or regions in connection with storage and processing of data, fulfilling your requests, and operating the Services, which also may have data protection rules that differ from those of your country.

For non-US customers, by using our products or services, it deems that you grant us your explicit consent as to the cross-border transfer of your personal data to the US and other jurisdictions where our service provider is located.

If any cross-border flow and transfer of your personal data to the US or any other third countries/regions is required, we will ensure that such transfer complies with relevant data protection and personal data laws and regulations of the country/region where the data is transferred and transferred and will implement appropriate measures to ensure that your personal data remains fully protected when it is transferred to a jurisdiction outside of your jurisdiction, including transferring personal data pursuant to standard contractual clauses (often called “SCCs”) if you are customers from the EEA, UK, or Switzerland.

Your Rights and How to Exercise Them

  1. Your Rights

    In addition to the data rights stipulated by the relevant laws and regulations applicable to your country or region, you have the following data rights under this Privacy Policy:

    • Right to Access Your Personal Data: You have the right to access your personal data, and we will provide you with the records of our collection and processing of your personal data at your request;
    • Right to Change Personal Data: When you find that the personal data we process about you is wrong, you have the right to ask us to make corrections;
    • Right to Delete Personal Data: Unless otherwise stipulated by relevant data protection laws and regulations, or to meet other compliance requirements, you can request the deletion of some or all your information collected by us at any time. However, we need to remind you that doing so may cause you to be unable to use the relevant services we provide normally;
    • Right to Withdraw Consent: For services that require your consent to collect your personal data, you can request us to withdraw your previous consent at any time;
    • Right of Data Portability: you can request us to transfer all or part of your data records to other data collectors or processors;
    • Right to Object: In some business functions, we may only make decisions based on non-human automatic decision-making mechanisms including information systems and algorithms. If these decisions significantly affect your legal rights, you have the right to ask us to explain and we will provide appropriate remedies.
  2. Exercise Your Rights

    For security, you may be required to provide a written request or otherwise prove your identity. We may ask you to verify your identity before processing your request. We will respond within 30 days. If you are not satisfied, you can also complain through the following channel: support@rabbit.tech.

    We may ask you to provide certain additional information to identify whether you are our user before we decide to meet your request to exercise your rights.

    For your reasonable requests, we do not charge fees in principle, but for repeated requests that exceed reasonable limits, we will charge a certain cost as appropriate. For those that are unnecessarily repetitive, require excessive technical means (e.g., need to develop new systems or fundamentally change existing practices), pose risks to the legitimate rights and interests of others, or are highly impractical (e.g., involve backing up information stored on tapes). requests, we may refuse them.

Update Your Information or Pose a Question

If you have questions about your privacy on Services or this Privacy Policy, please contact us at support@rabbit.tech.

Changes to this Privacy Policy

We will post any adjustments to the Privacy Policy on this page, and the revised version will be effective when it is posted. If we materially change the ways in which we use or share personal information previously collected from you through Services, we will notify you through Services, by email, or other communication.

Contact Information

rabbit, located at 1626 Montana Avenue, Suite 162, Santa Monica CA 90403, is the entity responsible for the collection, use, and disclosure of information under this Privacy Policy. If you have any questions, comments, or concerns about our processing activities, please email us at support@rabbit.tech.

EU Data Representative

We engage an external data representative in carrying out certain obligations as per GDPR. EU customers are welcome to reach out to the rabbit data representative for issues relating to GDPR using the contact information listed below.

Dr. Jörg Brettschneider, Rechtsanwalt
Brettschneider Rechtsanwaltsgesellschaft mbH
Alter Wall 32
20457 Hamburg
Deutschland/Germany
Phone: (+49) 40-3346-64190
Fax: (+49) 40-3567-4881
Email: ra-gdpr@brettschneider.law