Privacy Policy
Autumn (Rebase, Inc.)
Effective Date: February 1, 2025
1. Introduction
This Privacy Policy explains how Rebase, Inc., a Delaware corporation doing business as Autumn ("Autumn," "we," "us," or "our"), collects, uses, discloses, and protects personal information when you use our platform, APIs, SDKs, website, and related services (collectively, the "Services"). By using the Services, you agree to the practices described in this Policy.
2. Information We Collect
We collect information you provide directly, such as your name, email address, company details, and account credentials when you register or contact us. We also collect billing and payment details processed through our payment providers. When you use the Services, we automatically collect technical data such as IP address, device and browser information, log data, and usage activity through cookies and similar technologies.
3. Customer Data
As a billing infrastructure provider, we process data that our customers submit or route through the Services about their own end users, including identifiers, contact details, and transactional and usage records ("Customer Data"). We process Customer Data as a processor or service provider on behalf of our customers, solely to provide the Services and in accordance with our agreements with them and applicable Data Processing Agreements.
4. How We Use Information
We use personal information to provide, maintain, and improve the Services; to process billing and payments; to authenticate users and secure our systems; to respond to support requests; to communicate service-related and, where permitted, marketing messages; to comply with legal obligations; and to detect, prevent, and address fraud, abuse, and security incidents. We do not sell personal information.
5. Legal Bases for Processing
Where the GDPR or similar laws apply, we process personal information on the following legal bases: performance of a contract with you; our legitimate interests in operating and securing the Services; compliance with legal obligations; and your consent where required. You may withdraw consent at any time without affecting processing carried out before withdrawal.
6. How We Share Information
We share personal information with service providers and subprocessors that help us operate the Services, including cloud hosting, payment processing, analytics, and communications providers. We may also share information to comply with law or valid legal process, to enforce our agreements, to protect the rights, safety, and property of Autumn or others, and in connection with a merger, acquisition, or sale of assets. Service providers are bound by contractual obligations to protect personal information.
7. International Data Transfers
We are based in the United States and may process personal information in countries other than where you reside. Where we transfer personal information from the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK Addendum, as applicable.
8. Data Retention
We retain personal information for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Customer Data is retained in accordance with our agreements with the relevant customer. When information is no longer needed, we delete or anonymize it.
9. Security
We implement reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Your Rights
Depending on your location, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to opt out of marketing communications. California residents may have rights under the CCPA/CPRA, including the right to know, delete, and correct personal information and to opt out of sale or sharing. If we process your information on behalf of a customer, we will refer your request to that customer. To exercise your rights, contact us at security@useautumn.com.
11. Cookies and Tracking
We use cookies and similar technologies to operate and secure the Services, remember preferences, and understand usage. You can control cookies through your browser settings, though disabling some cookies may affect functionality of the Services.
12. Children's Privacy
The Services are not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the revised Policy on our website and update the effective date above. Material changes will be communicated as required by applicable law. Your continued use of the Services after changes take effect constitutes acceptance of the updated Policy.
14. Contact Us
For questions about this Privacy Policy or our data practices, contact us at security@useautumn.com or at: Rebase, Inc. (d/b/a Autumn), Email: security@useautumn.com, Website: https://useautumn.com
