Rebel Labs | Participant Privacy Notice

1. Who We Are

Rebel Labs Inc. is a Delaware corporation headquartered in Virginia, United States. We are the data controller (or “business,” under U.S. state law) for the personal information described in this Notice. Contact details are in Section 13.

2. Information We Collect

2.1 Information from the recruitment platform

When you accept a study on Prolific or another recruitment platform, the platform shares with us:

Your platform participant ID (for example, your Prolific ID). This is the identifier we use to reference you. We do not collect your name or contact details.
Demographic and profile attributes you have provided to the platform and that we selected as study filters or that the platform exports by default, which may include age, sex or gender, country and region of residence, ethnicity, employment status, household income band, education, language, and similar attributes.
Your responses to any screening questions we asked on the platform.
Study metadata such as start time, completion time, and completion status.

2.2 Information you provide during the interview

Video and audio recording of you during the interview, captured through your camera and microphone. The video shows your face and whatever is visible behind you. Please choose a private location and a neutral background. Recordings are used only by Rebel Labs and are never provided to clients.
Transcript of the interview, generated automatically from the recording.
Everything you choose to say. Interviews are open-ended. Depending on the study, you may talk about your lifestyle, habits, purchases, finances, travel, media consumption, work, family, health, opinions, and values. Some of this may be sensitive information under applicable law, including health conditions, political opinions, religious beliefs, racial or ethnic origin, sexual orientation, or financial details. We collect this only when you choose to share it. You may decline any question.
Written survey responses, if the study includes a written component.

2.3 Information we collect automatically

When you use the interview link, we and our service providers automatically collect limited technical data: IP address, approximate location derived from IP, device and browser type, operating system, connection quality, timestamps, and interaction logs (for example, when the call started and ended, and any errors). We use essential cookies or similar technologies only as needed to run the interview session. We do not use advertising cookies on the Research Platform.

2.4 Information we do not collect

We do not ask for, and ask you not to provide, your name, email address, phone number, home address, or other direct identifiers, consistent with recruitment platform rules.
We do not knowingly collect information from anyone under 18.

2.5 Information we create

De-identified transcripts. We process transcripts to remove or mask direct identifiers you may have spoken (such as your name, an employer name, a street address, or a phone number). “De-identified” in this Notice and in the Participant Agreement means that direct identifiers have been removed or masked.
Agents. We generate AI agents from de-identified transcripts, as described in Section 1(d) of the Participant Agreement. An Agent is a text-based model generated from de-identified transcripts (typically pooled across many Participants), together with public data, that simulates how people with particular characteristics and stated views might answer questions. Agents carry no name, are not presented as a replica of you personally, and are not designed to be traced back to you.
Aggregated and statistical outputs, such as distributions of responses across a synthetic population, model validation metrics, and research findings.

3. How We Use Information

We use the information described above to:

Run the interview and the study: operate the AI interviewer, record and transcribe the conversation, check completion, and review quality.
Generate Agents and synthetic populations: build, calibrate, validate, and query AI agents grounded in Participant Submissions and public data.
Develop and improve our technology: train, fine-tune, evaluate, and improve our simulation models, prompts, interview methods, and software, and measure how accurately simulations match real human responses.
Deliver services to clients: provide clients with simulation outputs, Agents, and de-identified transcripts for their business research and decision-making.
Conduct and publish research: produce academic papers, workshop submissions, technical reports, and case studies using de-identified data and aggregated findings.
Promote our services: use aggregated findings and de-identified excerpts in demonstrations and marketing.
Compensate you: approve or reject your submission on the recruitment platform.
Communicate with you: respond to questions or requests, and send study-related messages through the recruitment platform.
Protect and secure: detect fraud, bots, AI-generated responses, duplicate participation, and misuse; secure our systems; and enforce our agreements.
Comply with law: respond to lawful requests and meet legal, regulatory, tax, and audit obligations.

We do not sell your personal information and do not use it for targeted advertising.

4. How We Share Information

We share personal information with the following categories of recipients:

Service providers who process data on our behalf under contract, including: the recruitment platform (for study administration and payment); our real-time video and voice infrastructure provider (to run the AI interviewer and capture video and audio); speech-to-text and transcription providers; cloud infrastructure and AI model providers, each of which is contractually prohibited from using our content to train its own models; analytics, logging, and security tools; and de-identification tooling. Service providers may only use information to provide services to us.
Clients and research partners, who receive de-identified transcripts, Agents, and simulation outputs only. We do not provide clients with your video or audio recording, any image of you, your Prolific ID, or your raw (non-de-identified) transcript. Our client contracts prohibit any attempt to identify or contact you and restrict use to the client’s internal business and research purposes.
Academic collaborators and publication venues, who may receive de-identified excerpts and aggregated findings.
Professional advisors, such as lawyers, accountants, auditors, and insurers.
Business transaction parties, in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to confidentiality.
Authorities, where required by law, subpoena, or court order, or to protect the rights, property, or safety of Rebel Labs, our Participants, our clients, or the public.

5. De-identified Information

We remove direct identifiers from transcripts before they are shared with clients. To protect yourself, avoid stating information during the interview that would identify you or another person. Once information has been de-identified so that it cannot reasonably be linked to you, we may retain and use it for any purpose. We will not attempt to re-identify de-identified information, and we contractually require recipients not to do so.

6. Recording and AI Disclosures

Recording consent. Your interview is recorded. We obtain your consent before recording begins through your acceptance of the Participant Agreement, and we ask you to reaffirm that consent verbally at the start of the interview, which is captured on the recording. You must not allow anyone else to be present or recorded.

AI disclosure. You are interviewed by an artificial intelligence system, not a human. We tell you this in the study description, in the Participant Agreement, and at the start of the call itself.

Voice, face, and likeness. We will never use your recording to synthesize, clone, or imitate your voice or face, and we will never generate an image, video, or visual likeness of you. Video is not used to build Agents. Agents are text only. We will not use your recording in advertising or marketing without your separate written permission.

7. Retention

We retain your information for as long as reasonably necessary for the purposes described in this Notice. In determining how long to retain information we consider whether we need it to process your Submission and compensation, to generate and operate Agents and otherwise carry out the Project, to invite you to follow-up studies and conduct validation research, to resolve disputes, to enforce our agreements, to meet legal and audit obligations, and to protect the security and integrity of our systems. Video and audio recordings are retained only as long as needed for authenticity and quality review and are then deleted. De-identified and aggregated information may be retained and used for any purpose.

8. Security

We use administrative, technical, and organizational measures designed to protect your information, including encryption in transit and at rest, access controls and least-privilege access, logging and monitoring, vendor security review, and employee and contractor confidentiality obligations. Rebel Labs has completed a SOC 2 Type I examination and is undergoing a SOC 2 Type II examination. No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and regulators as required by law, through the recruitment platform where we have no other contact details for you.

9. Your Rights and Choices

Depending on the state in which you live, you may have the right to request that we confirm whether we process your personal information, to request access to or deletion of your personal information, and to request that we correct inaccurate personal information we maintain about you. These rights are not absolute, and in certain cases we may decline a request as permitted by law. Because Rebel Labs owns the Submissions under the Participant Agreement, and because de-identified information and Agents already generated cannot be traced back to you, deletion applies to your personal information and does not extend to Agents, models, or aggregated outputs already created.

To make a request, contact us at contact@rebellabs.com with “Participant Privacy Request” in the subject line, or message us through the recruitment platform. We may need to verify your request through the recruitment platform before fulfilling it, and we will respond within the time required by applicable law. We will not discriminate against you for exercising your rights.

10. U.S. State Privacy Disclosures

If you are a resident of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Nebraska, Indiana, Kentucky, Rhode Island, or another state with a comprehensive privacy law, the rights in Section 9 are available to you as provided by that law.

Categories collected (past 12 months): identifiers (platform ID, IP address); demographic and protected classification characteristics; commercial information (purchases and preferences you describe); internet and network activity; approximate geolocation; audio, visual, and electronic information (video and audio interview recording); professional or employment information; education information; sensitive personal information you choose to share (which may include health, financial, racial or ethnic origin, religious or philosophical beliefs, sexual orientation, and political opinions); and inferences drawn from the above (the Agent).

Sources: you; the recruitment platform; your device.

Purposes: Section 3. Recipients: Section 4. Retention: Section 7.

Sensitive personal information is used only for the purposes in Section 3, with your consent, and is not sold or used for targeted advertising. Maryland residents: we do not sell sensitive data and collect only what is reasonably necessary for the study you chose to participate in.

California: We do not “sell” or “share” personal information as defined by the CCPA, and we have no actual knowledge that we sell or share the personal information of consumers under 16. We do not use personal information for automated decision-making that produces legal or similarly significant effects about you. We do not respond to Do Not Track signals, but we honor Global Privacy Control signals where the law requires (there is no sale or sharing to opt out of).

11. Participants Outside the United States

We currently recruit Participants located in the United States only, and our Research Platform is not directed to individuals outside the United States. If you are located outside the United States, you are not eligible to participate. Before recruiting Participants in any other country, we will update this Notice with the disclosures required by local law, including any applicable international transfer safeguards.

12. Children

The Research Platform is not directed to anyone under 18, and Participants must be at least 18 years old. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a person under 18, and in particular from a child under 13, we will delete it promptly. If you are a parent or guardian and believe a minor has participated, contact us and we will delete the information.

13. Contact Us

Rebel Labs Inc. c/o Republic Registered Agent LLC 262 Chapman Rd, Ste 240 Newark, DE 19702 Email: contact@rebellabs.com (preferred for all requests) Website: https://rebellabs.com

For data requests, please include “Participant Privacy Request” in the subject line and your recruitment platform ID.

14. Changes to This Notice

We may update this Notice from time to time. We will post the revised Notice with a new “Last Updated” date. If we make material changes to how we use or disclose Participant information, we will (a) apply the changes only to information collected after the change, unless we obtain your consent, and (b) notify Participants whose data we can still link to a platform ID through the recruitment platform where feasible. We will not retroactively expand our use of your information without your consent.