Privacy Policy.

To The Moon Labs Inc.

1111B S Governors Ave STE 28882

Dover, DE 19904

United States

Email: support@rhetor.ai

For purposes of applicable data protection laws, TTML is the data controller for Personal Data described in this Privacy Policy.

Data protection laws distinguish between a "controller" (who decides why and how Personal Data is processed) and a "processor" (who processes Personal Data on a controller's behalf and under its instructions). Our role depends on how your data reaches us:

• When we are the controller. For people who deal with TTML directly, we are the controller. This includes visitors to our own websites, account holders who register with us, our partners' account administrators and staff, billing contacts, and anyone who communicates with us. This Privacy Policy governs that data.
• When we are a processor. When one of our partners uses a white-label version of the Platform to collect and process Personal Data about their own clients, leads, and end users, the partner is the controller of that data and TTML acts as a processor on the partner's behalf. We process that data only to provide and support the Platform, under the partner's instructions and our agreement with the partner (including any applicable Data Processing Agreement). We do not use it for our own independent purposes.

Our partners independently choose and control the analytics, advertising, and other tracking technologies deployed on their own branded instances of the Platform. Those choices are the partner's responsibility, are governed by the partner's own privacy notice, and are not controlled by or attributable to TTML.

If you are an end user or lead of one of our partners, the partner's own privacy notice governs how your Personal Data is handled, and you should direct privacy requests to that partner. We will assist our partners in responding to such requests as required by law.

This Privacy Policy applies to Personal Data we process as a controller, collected when you:

• Visit our website
• Register for or use the Platform
• Administer or use a partner account
• Communicate with us
• Receive marketing communications
• Interact with our support services

Where we act as a processor for a partner (see "Our Role: Controller and Processor"), that partner's privacy notice, not this one, governs the collection and use of Personal Data about their clients, leads and end users.

This Privacy Policy does not apply to third-party services you may access through the Platform.

Personal Data You Provide

We may collect:

Identity Data

• Username
• Profile information
• Account credentials

Contact Data

• Email address
• Company name
• Business contact details
• Phone Number

Payment Data

• Billing address
• Payment method details (processed by third-party providers)

Support & Inquiry Data

• Information you provide when contacting support
• Feedback and communications

Audit and Business Data

We also process information submitted through our audit and lead-capture tools, and information about the businesses and websites analyzed through the Platform, which may include publicly available business-listing information. Some of this information may relate to an individual.

Customer Content

We process Customer Content that you upload to the Platform.

• You retain ownership of Customer Content.
• We process it only to provide and improve the Platform.
• We may use anonymized and aggregated Customer Content to train and improve our AI models, consistent with our Terms of Service and applicable law.

We do not use identifiable Customer Content for model training.

Automatically Collected Data

When you use the Platform, we may collect:

Technical Data

• IP address
• Browser type
• Device information
• Operating system
• Internet service provider

Usage Data

• Pages viewed
• Feature usage
• Session duration
• Interaction data

We also log IP addresses and related technical data for security, fraud prevention, and audit-logging purposes.

Third-Party Login Data

If you register or sign in using third-party authentication (such as Google) or a one-time email code, we may receive limited profile information from those providers in accordance with their permissions.

We use personal information to:

• Provide and operate the Platform
• Create and manage user accounts
• Deliver audit results and lead-capture functionality
• Process payments
• Comply with legal obligations
• Provide customer support
• Improve and develop our services
• Train and improve AI models using de-identified and aggregated data only
• Send service-related communications
• Ensure security and prevent fraud

We do not sell personal information.

Where applicable, we rely on:

• Contract performance
• Legitimate interests (including operating and securing the Platform and processing publicly available business information for audits)
• Consent (where required)
• Legal compliance

Where we act as a processor for a partner, the partner is responsible for establishing a legal basis for the processing it instructs.

We may share information with:

Service Providers

• Hosting providers
• Payment processors
• Analytics providers
• Customer support tools
• AI Inference providers
• Data and audit providers
• Email delivery providers
• Advertising and analytics, on our own websites and products

These providers are contractually required to protect your information.

At Our Partners' Direction

For white-label products, Personal Data collected on a partner's behalf (such as leads and audit results) is made available to that partner and delivered to the tools the partner configures, which may include webhook endpoints, data exports, and messaging integrations. We make these disclosures as a processor, at the partner's direction.

Business Transfers

Information may be transferred in connection with:

• Merger
• Acquisition
• Asset sale
• Financing

Legal Requirements

We may disclose information if required to:

• Comply with law
• Respond to lawful requests
• Protect rights and safety
• Enforce our Terms

We are based in the United States. If you access the Platform from outside the U.S., your information may be transferred to and processed in the United States and other countries.

Where required, we implement appropriate safeguards (such as contractual protections).

We retain personal information only as long as necessary to:

• Provide the Platform
• Comply with legal obligations
• Resolve disputes
• Enforce agreements

Upon termination, Customer Content is handled according to the Terms of Service and applicable law. Where we act as a processor, we retain and delete partner data in accordance with our agreement with the partner.

Depending on your location, you may have the right to:

• Access your personal information
• Correct inaccurate data
• Delete your data
• Object to processing
• Restrict processing
• Data portability
• Withdraw consent

To exercise rights, contact: support@rhetor.ai. We will respond as required by applicable law.

If your Personal Data was collected through a partner's white-label instance, the partner is the controller of that data. Please direct your request to that partner, and we will assist them as required by law.

For U.S. residents: we do not sell your Personal Data. On our own websites and products, we may use analytics and advertising technologies that some state laws treat as "sharing" for cross-context behavioral advertising, which you can limit through your browser or device settings.

We use cookies and similar technologies to:

• Maintain sessions and keep you signed in
• Analyze usage and measure performance
• Improve performance
• Remember preferences
• Detect and prevent automated abuse
• Measure marketing campaigns and deliver relevant advertising

On our own websites and products, this includes third-party analytics and advertising technologies, which may share online identifiers with those providers for measurement and advertising. This does not apply to our partners' white-label instances, where the partner chooses and controls the technologies used.

Some cookies are strictly necessary for the Platform to function. Others, such as analytics and advertising cookies, are optional. Where required by law, we obtain consent before setting non-essential cookies, and you can withdraw consent or manage your preferences at any time.

You can control cookies through your browser settings. Disabling cookies may affect Platform functionality.

We implement reasonable technical and organizational safeguards designed to protect personal information. However, no system is completely secure, and we cannot guarantee absolute security.

The Platform is not intended for individuals under 18 years old, and we do not knowingly collect personal information from minors. If we become aware that we have collected information from a minor, we will delete it.

The Platform may contain links to third-party services. We are not responsible for their privacy practices.

We may update this Privacy Policy from time to time. We will update the "Last updated" date and may provide additional notice where required by law.

Your continued use of the Platform after changes become effective constitutes acceptance.

If you have questions about this Privacy Policy, contact:

Email: support@rhetor.ai

Address: To The Moon Labs Inc, 1111B S Governors Ave STE 28882, Dover, DE 19904, United States