Before/after stance changes across captured policy versions, with exact citations. If no before/after delta is available yet, AIRIN shows the latest citation-backed stance events instead.
Latest stance: sale or sell
“We may share your information in the following circumstances: with service providers who perform services on our behalf; with business partners with your consent; in response to legal process or government requests; to protect the rights, privacy, safety, or property of Rex, you, or others; and in connection with a merger, acquisition, or sale of assets. We do not sell your personal information to third parties.”Open citation
Latest stance: third party or vendor sharing
“We may share your information in the following circumstances: with service providers who perform services on our behalf; with business partners with your consent; in response to legal process or government requests; to protect the rights, privacy, safety, or property of Rex, you, or others; and in connection with a merger, acquisition, or sale of assets. We do not sell your personal information to third parties.”Open citation
Latest stance: no training claim
“Rex maintains a documented information security programme and externally communicates its key commitments through this Privacy Policy, our Terms of Service , our Data Processing Agreement , our AI Security overview , and our publicly accessible Trust Center . Our key technical and organisational measures include: Encryption of personal data in transit (TLS 1.2 or higher) and at rest (AES-256), including database backups. Role-based access controls, multi-factor authentication, least-privilege provisioning, and regular access reviews. Infrastructure hosted on AWS with VPC isolation, network access controls, and continuous monitoring. Tenant isolation so personal data is logically segregated between customers and is not used to train or fine-tune any AI models. Documented incident detection, response, and breach notification procedures, with notification to affected customers without undue delay. Personnel controls including background checks, signed confidentiality agreements, and recurring security awareness training. Continuous improvement through vulnerability scanning, dependency monitoring, and independent assessments. Rex is pursuing SOC 2 Type II certification. A current list of subprocessors, certifications, and our overall security posture is maintained at our Trust Center linked above. No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.”Open citation
Latest stance: indefinite or necessity based
“We retain your information for as long as necessary to provide our services and fulfil the purposes described in this policy, unless a longer retention period is required or permitted by law. When we no longer need to retain your information, we will securely delete or anonymise it.”Open citation
Generated from live stance events. Informational only, not legal advice.
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.
Your privacy
We use first-party analytics and Google Analytics to understand traffic and improve the site (IP-derived location, device info, analytics cookies). We never sell your personal information and run no advertising trackers. You can opt out below. See our Privacy Policy and Cookie Policy.