Privacy Policy

Last updated: 5 October 2026

At Rexenda we believe privacy is a right, not a feature. This Privacy Notice explains what personal data we process, why, and the choices and rights you have. We apply the standards of the EU General Data Protection Regulation (GDPR) to everyone who uses Rexenda, wherever they are in the world.

Who this notice applies to

This notice covers visitors to our website, people who create a Rexenda account, and individuals whose data our customers process through the platform. Our service is intended for businesses and is not directed at anyone under 18.

Data we process

We process account details (such as name, email and organization), billing information, technical and usage data needed to operate and secure the service, and the content of the conversations and files that flow through your workspace. We only collect what is necessary for the purposes described below.

How and why we use it

We use personal data to provide and secure the service, process payments, offer support, comply with legal obligations and improve Rexenda. Our legal bases are the performance of our contract with you, your consent where required, our legitimate interest in running a safe and reliable service, and compliance with the law. We never sell your personal data.

Our role: controller and processor

For your account and our own operations we act as the data controller. When you use Rexenda to communicate with your own contacts, you are the controller of that data and we act as your processor, handling it only on your documented instructions under a data processing agreement.

Artificial intelligence

Some features use AI models to draft replies, summarize conversations and assist your team. Your content is processed only to deliver these features to you, always under confidentiality obligations, and we do not use your conversations to train third-party foundation models without your explicit consent.

Data from connected accounts (Google and Microsoft)

When you connect a Gmail or Microsoft/Outlook account, Rexenda accesses only the data needed for the features you enable: sending email on your behalf (Google gmail.send; Microsoft Mail.Send and Mail.ReadWrite) and reading and writing your calendar (Google Calendar; Microsoft Calendars.ReadWrite). We store OAuth tokens encrypted and only the message and calendar content you create or receive through Rexenda, solely to provide the shared-inbox and scheduling features. We never sell this data, never use it for advertising, and never use it to train generalized AI or machine-learning models. You can disconnect an account at any time, which revokes our access and deletes the stored tokens.

Limited Use of Google user data

Rexenda's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Google API Services User Data Policy

Sharing and international transfers

We share data only with carefully vetted service providers that host our infrastructure, process payments or deliver messages on our behalf, and only under contracts that require them to protect it. Where data is transferred across borders, we rely on recognized safeguards such as the European Commission's Standard Contractual Clauses.

Data retention

We keep personal data only for as long as your account is active or as needed to provide the service, comply with legal and accounting obligations, resolve disputes and enforce our agreements. When data is no longer needed, we delete or anonymize it.

How we protect your data

We protect data with encryption in transit and at rest, strict access controls, network isolation, continuous monitoring and regular backups. No system is perfectly secure, but we work continuously to safeguard your information and to notify you promptly if a breach ever affects you.

Your privacy rights

Depending on your location, you have the right to access, correct, delete, restrict or object to the processing of your personal data, to receive a portable copy, and to withdraw consent at any time. To exercise any of these rights, contact us using the details below; you also have the right to lodge a complaint with your local data protection authority.

Cookies

We use only the cookies and similar technologies needed to keep you signed in, remember your preferences and understand how the service is used. You can control non-essential cookies through your browser settings.

Changes to this notice

We may update this notice as our service and the law evolve. When we make material changes, we will update the date above and, where appropriate, notify you. Continued use of Rexenda after an update means you accept the revised notice.

Contact us

If you have any questions about this notice or how we handle your data, or to exercise your rights, contact us at [email protected]. We will respond within the timeframes required by applicable law.