REBUTL Privacy Policy
Effective Date: February 4, 2026
Last Updated: March 11, 2026
1. Introduction
This Privacy Policy explains how Ne0x Labs LLC ("Company," "we," "us," or "our") collects, uses, and protects your information when you use REBUTL ("Platform," "Service") at rebutl.io.
By using REBUTL, you agree to the collection and use of information as described in this policy.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Email address
- Name (if provided)
- Password (stored securely hashed)
2.2 Usage Information
We automatically collect:
- Debate topics you submit
- Debates you view and interact with
- Device and browser information
- IP address
- Pages visited and features used
2.3 Payment Information
When you purchase credits, payment is processed by Dodo Payments, our Merchant of Record. We do not store your full credit card number. We receive:
- Transaction confirmation
- Last four digits of your card
- Billing address (if provided to Dodo Payments)
3. How We Use Your Information
We use your information to:
- Provide and operate the Service
- Process your debate requests
- Process payments and manage credits
- Send important service notifications
- Improve the Service and user experience
- Enforce our Terms of Service and content policies
- Comply with legal obligations
We do not sell your personal information to third parties.
4. Lawful Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):
| Processing Activity | Legal Basis (GDPR Art.) |
|---|---|
| Providing the debate service and managing your account | Contract performance — Art. 6(1)(b) |
| Processing payments via Dodo Payments | Contract performance — Art. 6(1)(b) |
| Sending transactional emails (receipts, alerts) | Contract performance — Art. 6(1)(b) |
| Error monitoring and session replay (Sentry) | Legitimate interest in maintaining service reliability — Art. 6(1)(f) |
| Product analytics (PostHog) | Consent — Art. 6(1)(a) |
| Compliance with legal obligations (e.g. tax records) | Legal obligation — Art. 6(1)(c) |
Where we rely on consent (analytics), you may withdraw consent at any time by clicking "Decline" in the cookie banner or via Settings → Privacy & Data. Withdrawal does not affect the lawfulness of processing before withdrawal.
5. Information Sharing and Sub-Processors
We share information only with the following sub-processors acting on our behalf:
| Sub-processor | Role | Location | Privacy / DPA |
|---|---|---|---|
| Railway | Application hosting & infrastructure | USA | Privacy Policy |
| Dodo Payments | Payment processing (Merchant of Record) | USA | Privacy Policy |
| PostHog (US Cloud) | Product analytics | USA | DPA |
| Sentry | Error monitoring & session replay | USA | DPA |
| Resend | Transactional email delivery | USA | DPA |
| OpenRouter | AI model routing for debate generation | USA | Privacy Policy |
| Fireworks AI | AI model inference for debate generation | USA | Privacy Policy |
| Exa | Web research API for debate sourcing | USA | Privacy Policy |
We may also disclose information if required by law, court order, or to protect the rights, property, or safety of Ne0x Labs LLC, our users, or the public.
6. Data Storage and Security
- Your data is stored on servers in the United States
- We use industry-standard encryption for data in transit (HTTPS)
- Passwords are hashed using secure algorithms
- We implement reasonable security measures to protect your data
No method of transmission or storage is 100% secure. We cannot guarantee absolute security.
7. Data Retention
| Data Type | Retention Period |
|---|---|
| Account information | Until you delete your account + 30 days |
| Public debates | Indefinitely |
| Private debates | Until you delete them or your account |
| Rejected topics | 30 days |
| Payment records | As required by law (typically 7 years) |
8. Your Rights
You may:
- Access your personal data by contacting us
- Update your account information through your account settings
- Delete your account via Settings → Danger Zone (immediate) or by emailing us
- Export a machine-readable copy of all your data via Settings → Privacy & Data → "Download my data" (JSON format, available immediately)
- Object or restrict processing based on legitimate interest by contacting us
To exercise any of these rights, visit your account settings or email [email protected]. EU/UK/Swiss residents may also lodge a complaint with their local supervisory authority.
9. Do Not Sell or Share My Personal Information (CCPA)
We do not sell or share your personal information.
REBUTL does not sell, rent, or share your personal information to third parties for monetary or other valuable consideration. We do not engage in cross-context behavioral advertising or share data with advertising networks or data brokers.
Your California Privacy Rights
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):
- Right to Know: You may request details about the personal information we have collected about you in the past 12 months, including the categories of information, sources, purposes, and third parties with whom we share it.
- Right to Delete: You may request that we delete your personal information, subject to certain legal exceptions (e.g., to complete a transaction, detect security incidents, comply with legal obligations).
- Right to Correct: You may request that we correct inaccurate personal information we maintain about you.
- Right to Opt-Out: You may opt out of the sale or sharing of your personal information. Since we do not sell or share personal information, no opt-out action is necessary.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
How to Exercise Your Rights
To submit a CCPA request, email us at [email protected] with the subject line "CCPA Request" and specify which right you wish to exercise.
We will respond to your request within 30 days of receipt. If we need additional time (up to 90 days total), we will notify you of the extension and the reason.
To verify your identity, we may ask you to confirm the email address associated with your REBUTL account. For deletion requests, we will delete your account and all associated data, except where retention is required by law (e.g., payment records for tax compliance).
Authorized Agents
You may designate an authorized agent to submit a CCPA request on your behalf. The agent must provide written proof of authorization or a valid power of attorney. We may also require you to verify your identity directly with us.
10. Cookies
We use cookies and similar technologies for:
- Keeping you signed in
- Monitoring errors to improve our service
For detailed information about the cookies we use, their purposes, and how to manage them, please see our Cookie Policy.
11. Third-Party Links
REBUTL debates may contain citations linking to third-party websites. We are not responsible for the privacy practices of these external sites.
12. Children's Privacy
REBUTL is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us.
13. International Data Transfers
REBUTL is operated by Ne0x Labs LLC, a US company. If you access our Service from the European Economic Area (EEA), United Kingdom, or Switzerland, your personal data will be transferred to and processed in the United States.
We rely on the Standard Contractual Clauses (SCCs) adopted by the European Commission under Implementing Decision (EU) 2021/914 as the lawful safeguard for these transfers under Art. 46(2)(c) GDPR. Each US-based sub-processor listed in §5 either (a) has executed SCCs with us, (b) participates in a recognised adequacy framework, or (c) is a Merchant of Record that acts as an independent data controller for payment data.
You may request a copy of our SCC documentation by emailing [email protected].
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated policy with a new "Last Updated" date
- Sending an email to your account address (for significant changes)
Your continued use after changes constitutes acceptance of the updated policy.
15. Contact Us
If you have questions about this Privacy Policy, contact us:
Ne0x Labs LLC
Email: [email protected]
Website: https://rebutl.io
This Privacy Policy was last updated on March 11, 2026.
Copyright 2026 Ne0x Labs LLC. All rights reserved.