LEGAL
Privacy policy
How Rebase handles personal data, inquiry details, analytics, live chat, cookies, security checks, and communication preferences across the website.
Last updated: June 18, 2026
Thank you for choosing Rebase ("Rebase", "we", "us", or "our"). This Privacy Policy explains what information we collect through https://rebase.agency, why we process it, how long we keep it, who may receive it, and how you can contact us about privacy rights.
The website is a business-to-business lead-generation and information website. It does not create user accounts, process payments, or collect passwords through the website.
This policy is prepared for international website visitors. Your specific rights depend on the laws that apply to you and to us as controller.
1. Who is responsible for this website?
Controller: Rebase LLC is the controller for this website. Privacy requests can be sent to [email protected].
2. What information do we collect?
Information you provide
The inquiry form asks for your name, company or team, email address, project details, and privacy-policy agreement. It may also include optional Telegram contact, budget, timeline, ecosystems or networks, and campaign attribution parameters such as UTM source, medium, campaign, and content.
Information collected automatically
When you use the website, we may process technical information such as IP address, browser and device details, referring URLs, pages visited, timestamps, cookie preference state, security verification signals, and server logs.
We do not intentionally request special-category or sensitive personal data through the website. Please do not include unnecessary sensitive information in project details or chat messages.
3. How and why do we process information?
We process website data only for defined business, security, analytics, chat, legal, and operational purposes.
| Purpose | Data and source | Legal basis | Recipients |
|---|---|---|---|
| Respond to project inquiries and prepare commercial discussions. | Name, company, email, project details, optional Telegram, budget, timeline, ecosystems, and message metadata from the inquiry form. | Steps requested before entering into a contract and our legitimate interest in responding to business inquiries. | Authorized Rebase team members and our self-hosted ERP/CRM system. |
| Create and manage CRM lead and opportunity records. | Inquiry details, privacy-policy acceptance, acceptance timestamp, and campaign attribution parameters such as UTM source, medium, campaign, and content. | Legitimate interests in lead management, business administration, and preserving records of requested communications. | Authorized Rebase team members and our self-hosted ERP/CRM system. |
| Protect the inquiry form and website from spam, abuse, and automated traffic. | IP address, request headers, Turnstile token, browser signals, timestamps, and verification metadata. | Legitimate interests in website security, service integrity, and abuse prevention. Where required, strictly necessary storage or access is used for security. | Cloudflare Turnstile and authorized technical team members reviewing security logs. |
| Understand aggregate website traffic and improve the website. | Page views, referrers, browser/device information, approximate location derived from network data, and timestamps after analytics consent. | Consent for optional analytics cookies or similar technologies. | Self-hosted Plausible analytics on Rebase-controlled infrastructure. |
| Provide live chat and preserve chat continuity. | Chat messages, chat metadata, optional contact details shared in chat, and chat continuity cookies after live-chat consent. | Consent for the optional live-chat widget and, after you start a chat, steps requested before entering into a contract or legitimate interests in responding. | Self-hosted Chatwoot live chat on Rebase-controlled infrastructure. |
| Handle legal, accounting, compliance, security, and privacy-rights requests. | Relevant correspondence, request details, identity-verification details where needed, and operational records. | Legal obligations and legitimate interests in compliance, recordkeeping, and establishing or defending rights. | Authorized Rebase personnel, professional advisers, authorities, or counterparties when required. |
4. When do we share information or transfer it?
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share information only with systems and recipients needed to run the website, handle inquiries, provide security, comply with law, protect rights, or complete a business transition.
| Service | Role | Transfer notes |
|---|---|---|
| Self-hosted ERP/CRM | Lead and opportunity management. | Hosted on Rebase-controlled infrastructure. Hosting location details will be added once available. |
| Self-hosted Plausible | Optional analytics after analytics consent. | Hosted on Rebase-controlled infrastructure and not sent to a third-party analytics SaaS provider. |
| Self-hosted Chatwoot | Optional live chat after live-chat consent. | Hosted on Rebase-controlled infrastructure and not sent to a third-party live-chat SaaS provider. |
| Cloudflare Turnstile | External anti-abuse verification service. | Cloudflare may process client IP address, TLS fingerprint, user-agent header, sitekey, origin, and related signals. Cloudflare acts as our processor for website protection and as an independent controller when improving Turnstile. |
| External links | Telegram, LinkedIn, Calendly, browser help pages, and similar destinations. | If you open an external link, that third party processes your visit under its own terms and privacy notice. |
Because Rebase may operate internationally, personal data may be accessed or processed in countries different from your country of residence. Where required, we use appropriate contractual, organizational, and technical safeguards for international transfers.
5. Do we use cookies and similar technologies?
We use essential local storage to remember your cookie preferences. Optional analytics and optional live chat run only when you enable the relevant category in the cookie banner or footer cookie settings.
| Cookie or storage | Provider | Purpose | Control |
|---|---|---|---|
| rebase-cookie-consent | Rebase | Local storage record containing consent version, analytics choice, live-chat choice, and update timestamp. | Strictly necessary to remember your preference. |
| Plausible script and analytics events | Self-hosted Plausible | Aggregate traffic measurement and website improvement. | Runs only when Analytics is enabled. |
| cw_conversation and cw_user_* cookies where used | Self-hosted Chatwoot | Live-chat session continuity and conversation state. | Runs only when Live chat is enabled. |
| Turnstile signals and any strictly necessary challenge storage | Cloudflare Turnstile | Distinguish legitimate inquiry submissions from bots and abuse. | Required for inquiry-form security. |
More detail is available in our Cookie Policy.
6. How long do we keep information?
We keep personal information only as long as needed for the purposes described in this policy, unless a longer period is required or permitted by law.
- Inquiry and CRM records are kept while they remain relevant to the commercial relationship, project discussion, legal compliance, accounting, security, or operational needs.
- Chat records are kept while needed to manage the conversation, follow up, preserve context, or comply with operational and legal needs.
- Analytics records are used for aggregate website reporting and kept according to the configuration of our self-hosted analytics system.
- Security logs and Turnstile verification records are kept for security, diagnostics, and abuse-prevention periods appropriate to the risk.
- Cookie preference records remain in your browser until you clear local storage or update your preference.
When we no longer need personal information, we delete it, anonymize it, or securely retain it only where deletion is not immediately possible, such as in backups or records required for compliance.
7. How do we keep information safe?
We use access controls, self-hosted operational systems, form validation, anti-abuse checks, server-side Turnstile verification, and other technical and organizational safeguards designed to protect personal information.
No internet transmission or storage system can be guaranteed fully secure. Submit only information that is appropriate for an initial business inquiry.
8. Do we collect information from minors?
The website is intended for business and professional inquiries and is not directed to children. If we learn that we have collected personal information from someone under 18, we will take reasonable steps to delete it. If you believe we have collected such information, contact us at [email protected].
9. What privacy rights can you exercise?
Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, withdrawal of consent, objection to processing, and information about how your personal information is used.
To make a request, contact us at [email protected]. We may need to verify your identity and clarify the request before acting on it. We will respond in accordance with applicable data protection laws.
If processing is based on consent, you may withdraw consent at any time. You can change analytics and live-chat consent from the cookie banner or the footer Cookie settings button. Withdrawing consent does not affect processing that happened before withdrawal.
Where applicable law provides it, you may also have rights to appeal an eligible request decision, to non-discrimination for exercising privacy rights, and to complain to a competent privacy or data-protection authority.
We do not sell personal information, share it for cross-context behavioral advertising, or use sensitive personal information to infer characteristics.
10. Data breach
If Rebase becomes aware of a security breach that has resulted or may result in unauthorized access, use, or disclosure of personal information, we will investigate and take appropriate action. Where required, we will notify affected individuals and applicable supervisory authorities within the timelines required by law.
11. Controls for browser privacy signals
Some browsers include Do-Not-Track or Global Privacy Control signals. We do not sell or share personal information for cross-context behavioral advertising, so the website does not use these signals to disable any sale or targeted-advertising activity. You can control optional analytics and live chat through our cookie settings and your browser controls.
12. Do we make updates to this policy?
We may update this policy to reflect changes to our practices, technology, legal obligations, controller details, or operations. The updated version will be indicated by an updated date and will be effective when posted.
13. How can you contact us?
If you have questions, comments, or privacy requests, contact us by email at [email protected].