Privacy Policy

RebelPSA is a division of Rebel Software, LLC, a Utah limited liability company ("Rebel Software," "we," "us," or "our"). We operate a professional services automation (PSA) platform designed for managed service providers (MSPs), accessible at www.rebelpsa.com and related subdomains (collectively, the "Platform").

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our marketing website or use our Platform. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Platform.

2.1 Information You Provide Directly

• Account Registration: Name, business email address, company name, job title, phone number, and password when you create an account.
• Billing Information: Payment card details, billing address, and tax identification numbers, processed through our third-party payment processor. We do not store full card numbers.
• Demo & Contact Requests: Information submitted through our request-a-demo or contact forms, including name, email, company, and message content.
• Support Communications: Messages, attachments, and metadata you send when you contact our support team.
• Customer Data: Data you input into the Platform in the course of managing your MSP operations, including client records, ticket information, asset data, and financial records ("Customer Data"). You retain ownership of all Customer Data.

2.2 Information Collected Automatically

• Log Data: IP address, browser type and version, pages visited, referring URLs, timestamps, and session duration.
• Device Information: Hardware model, operating system, unique device identifiers, and mobile network information.
• Usage Data: Feature interactions, clicks, search queries within the Platform, and error reports.
• Cookies & Similar Technologies: See Section 6 for details.

2.3 Information from Third Parties

• Data from integrated third-party services you connect to the Platform (e.g., RMM tools, accounting software, communication platforms), governed by the relevant third-party's privacy policy.
• Business contact information from publicly available sources for sales and marketing purposes.

We use the information we collect to:

• Provide, operate, maintain, and improve the Platform and its features.
• Process transactions and send related information including purchase confirmations and invoices.
• Respond to inquiries, provide technical support, and resolve disputes.
• Send administrative communications such as security alerts, updates, and policy changes.
• Send marketing communications (where permitted by law and consistent with your preferences), which you may opt out of at any time.
• Analyze usage patterns to improve user experience and develop new features.
• Detect, investigate, and prevent fraudulent transactions, unauthorized access, and other illegal activities.
• Comply with legal obligations, resolve disputes, and enforce our agreements.
• Fulfill any other purpose disclosed at the time you provide information.

We process Customer Data solely on your behalf and in accordance with your instructions as a data processor. We do not use Customer Data for our own independent purposes beyond those necessary to provide the Platform.

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf (e.g., cloud hosting, payment processing, email delivery, analytics, customer support tools), bound by confidentiality obligations and prohibited from using your information for their own purposes.
• Business Transfers: In connection with a merger, acquisition, reorganization, sale of assets, or bankruptcy, in which case the successor entity will be bound by terms consistent with this policy.
• Legal Requirements: When required by law, court order, subpoena, or other governmental or legal process, or to protect the rights, property, or safety of Rebel Software, our users, or the public.
• With Your Consent: For any other purpose with your prior written consent.

We require all third parties to maintain appropriate technical and organizational security measures and to process personal information only for the specified purposes and in accordance with our instructions.

We retain personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law. Account information is retained for the duration of your subscription and for up to 3 years thereafter to comply with legal, accounting, and reporting obligations. Customer Data is retained for the duration of your subscription and deleted within 90 days following account termination, unless you request earlier deletion or a longer period is required by law. Anonymized or aggregated data derived from your use of the Platform may be retained indefinitely for analytical purposes.

We use cookies and similar tracking technologies to operate and improve the Platform. Categories include:

• Strictly Necessary: Required for authentication, security, and core Platform functionality. Cannot be disabled.
• Performance & Analytics: Help us understand how visitors interact with our marketing website and Platform (e.g., page views, errors). We use anonymized data only.
• Functional: Remember your preferences such as language, timezone, and UI settings.
• Marketing: Used to deliver relevant advertising on third-party platforms. You may opt out via the applicable third-party settings or a cookie preference center where available.

Most browsers allow you to refuse or delete cookies. Disabling certain cookies may affect Platform functionality.

We implement industry-standard administrative, technical, and physical safeguards designed to protect your information against unauthorized access, alteration, disclosure, or destruction. These include encryption of data in transit (TLS) and at rest (AES-256), role-based access controls, two-factor authentication, regular security assessments, and SOC 2 aligned infrastructure. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and encourage you to use strong, unique passwords and to notify us immediately of any suspected unauthorized access to your account at info@rebelpsa.com.

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information, subject to certain legal exceptions.
• Portability: Receive your personal information in a structured, machine-readable format.
• Restriction / Objection: Object to or restrict certain processing of your personal information.
• Opt-Out of Marketing: Unsubscribe from marketing emails at any time by clicking the "unsubscribe" link in any email or contacting us directly.
• California Residents (CCPA/CPRA): You have the right to know, delete, and opt-out of the sale or sharing of personal information. We do not sell personal information.
• EEA / UK Residents (GDPR/UK GDPR): You have the right to lodge a complaint with your local supervisory authority.

To exercise any of these rights, please contact us at info@rebelpsa.com. We will respond within the timeframe required by applicable law (generally 30 days). We may need to verify your identity before processing your request.

Rebel Software, LLC is headquartered in Brigham City, Utah. If you access the Platform from outside the United States, your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. For transfers from the European Economic Area (EEA) or United Kingdom (UK), we rely on appropriate transfer mechanisms such as Standard Contractual Clauses approved by the European Commission. By using the Platform, you consent to such transfers.

The Platform is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected such information, please contact us at info@rebelpsa.com and we will promptly delete it.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new effective date and, where required by law or appropriate given the nature of the change, by sending an email notification to the address associated with your account. Your continued use of the Platform after the effective date constitutes acceptance of the revised policy. We encourage you to review this policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: