Redbelt

Privacy Policy

Last updated: September 16, 2026

This Privacy Policy explains how Redbelt AI LLC ("Redbelt AI," "we," "us") collects, uses, and shares personal data when you use our website, web application, APIs, and related services (collectively, the "Service").

This Privacy Policy does not apply when we process personal data as a service provider/processor for our business customers. In those cases, our processing is governed by our Data Processing Addendum ("DPA") and customer agreements.

1) Personal data we collect

A. Data you provide

  • Account & profile. Name, email, organization, role. Authentication is via WorkOS (we do not store your password).
  • Billing. Payment details are handled by Stripe; we receive limited billing metadata (e.g., invoice status).
  • Content you submit. Prompts, files, and other materials you upload ("Customer Data"), plus support tickets and other communications.
  • Feedback. Ratings, suggestions, and survey responses.
  • SMS information. When you participate in an SMS program, we collect your mobile number, message content, delivery information, and records of your consent, messaging preferences, and opt-out requests.

B. Data collected automatically

  • Usage & log data. IP address, timestamps, request/response metadata, feature usage, identifiers, and error logs.
  • Device data. Browser type, OS, device identifiers.
  • Cookies & similar tech. To keep you signed in, remember preferences, and measure product usage. See our Cookie controls in-product.

C. Information we do not intend to collect

We do not direct the Service to minors and do not knowingly collect children's data. Please do not upload payment card data or other highly regulated data (e.g., PHI) unless we have a written agreement permitting it.

2) How we use personal data

  • Provide and secure the Service. Account provisioning, auth, routing requests to third-party models, troubleshooting, abuse and fraud prevention.
  • Operate stateful workflows. Store conversations/files so features work as expected.
  • Improve the Service. De-identified/aggregated analytics, quality, and reliability.
  • Communicate with you. Product updates, transactional emails, support, and SMS messages you request or separately consent to receive, such as reminders, workflow updates, and text-based support or AI interactions.
  • Legal. Compliance, enforcement of our Terms, protection of rights and safety.

No training on your Customer Data or Outputs.

We do not use Customer Data or Outputs to train AI models unless you explicitly opt in in writing. We may analyze de-identified Usage Data to improve performance and security.

3) How we share personal data

  • Service providers / subprocessors. Cloud hosting, auth (WorkOS), payments (Stripe), logging, analytics, email/support, and SMS delivery. These parties act under instructions and appropriate safeguards. We maintain a live Subprocessor List at: https://redbelt.ai/legal/subprocessors (15 days' advance notice for material additions).
  • Enterprise customers. If you use a company email or are provisioned by your employer, certain account info may be visible to your organization's admins.
  • Legal/Compliance. To respond to lawful requests, enforce our Terms, or protect security and rights.
  • Business transfers. In connection with mergers, acquisitions, or similar events (subject to continued protections).

We do not sell or share personal data for cross-context behavioral advertising and do not process personal data for targeted advertising.

Mobile Information and SMS Consent

We do not sell or rent mobile numbers or SMS opt-in data, or share mobile information with third parties or affiliates for marketing or promotional purposes. SMS opt-in data and consent are not shared with third parties or affiliates for their own use, sold, rented, or transferred to another sender. Consent applies only to the business and messaging program identified when you opt in. The general sharing categories above do not authorize another business to use your SMS consent or enroll you in its own messaging program.

We provide SMS delivery providers and carriers with the information needed to deliver messages and operate the program on our behalf. This processing does not give those providers independent permission to market to you or use your messaging consent for their own purposes.

4) Retention

  • Logs are typically retained for 30 days.
  • SMS consent and opt-out records are retained as needed to document permission, honor communication preferences, and meet applicable legal requirements. Proof of consent is retained at least while that consent remains active. After an opt-out or account closure, we may retain limited records needed to honor the opt-out and document compliance; this does not authorize further messaging. These records may be kept longer than routine logs.
  • Files/conversations are retained to operate the Service and you can delete them at any time (subject to backups and legal holds).
  • After account closure, we provide 30 days to export data (see ToS) and then delete or de-identify from active systems; backups roll off on their normal cycle.

5) Security

We use administrative, technical, and physical safeguards, including encryption in transit and at rest, environment separation (dev/test/prod), SSO/SAML/MFA support, and vulnerability tooling (cloud, GitHub, Docker). No system is perfectly secure; please use caution when sharing information online.

6) Your rights and choices (US)

Depending on your state, you may have rights to access, delete, correct, or obtain a portable copy of certain personal data, and to appeal a denial. We will not discriminate against you for exercising your rights.

  • How to submit a request: email support@redbelt.ai with "Privacy Request" in the subject.
  • Verification: we may request information to confirm your identity/authority.
  • Response time: we aim to respond within 30–45 days, extendable where permitted by law.
  • Appeals: reply to our decision email with "Appeal" in the subject.

We do not use sensitive personal data to infer characteristics and do not engage in automated decisions producing legal or similarly significant effects.

SMS Choices

SMS enrollment is optional and requires a separate, affirmative choice. Accepting our Privacy Policy or general Terms of Service, installing a plugin, or connecting a messaging account does not by itself provide consent to receive texts. You can use Redbelt AI without enrolling in SMS. Consent applies to the sender and message purposes disclosed at enrollment; it does not authorize unrelated marketing messages.

For SMS programs in which you enroll, message frequency varies with your requests, settings, and activity, as described at enrollment. Message and data rates may apply. Reply STOP to unsubscribe or HELP for assistance, or contact support@redbelt.ai. After you unsubscribe, you may receive one confirmation of your opt-out. Sending a text to begin a conversation permits responses to that conversation, but does not by itself enroll you in unrelated or recurring messaging programs.

When another business uses Redbelt to operate its own messaging program, that business is responsible for identifying itself, describing its messages, obtaining recipient consent, and providing its privacy policy, messaging terms, and support contact. Redbelt processes information for that business under the applicable customer agreement and DPA. Your enrollment in one business's program does not enroll you in Redbelt's own program or another customer's program.

7) International transfers

We currently operate in the United States only. If we later transfer personal data internationally, we will implement appropriate transfer mechanisms.

8) Jurisdiction-specific disclosures

If state privacy laws require additional disclosures (e.g., categories, purposes, sources), we provide them in our US Privacy Notice at https://redbelt.ai/legal/us-privacy-notice. In general: identifiers, commercial info (billing metadata), internet activity (usage/logs), and in-product content are used to provide and secure the Service, communicate with you, and improve the Service.

9) Children

The Service is not directed to minors. If you believe a minor provided data, contact support@redbelt.ai and we will delete it.

10) Third-party services and links

If you enable integrations or follow third-party links, their terms and privacy policies apply to their handling of your data.

11) Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version with a new "Last updated" date and, for material changes, provide advance notice (e.g., email or in-app) consistent with our Terms.

12) Contact us

Redbelt AI LLC Notice Address: 16192 Coastal Highway, Lewes, Delaware 19958, USA

Privacy & data requests: support@redbelt.ai