Tuesday, July 7, 2026

Privacy Policy

Privacy Policy

Rebel Labs, Inc. (“Rebel Labs,” “we,” “us,” or “our”) operates the behavioral simulation platform available at platform.rebellabs.com (the “Platform”). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. It applies to your use of the Platform and our related services. By using the Platform, you agree to this Privacy Policy. If you do not agree, please do not use the Platform.

SIMULATION #01

RUNNING

MARKET ENTRY: APAC

[ ITER

033655

/ ADVERSARY RESPONSE ]

1. Who this policy is for

The Platform is a business-to-business product made available to organizations and their authorized users. It is not directed to individuals under the age of 18, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us personal information, contact us at contact@rebellabs.com and we will take appropriate steps to delete it.

2. Information we collect

Account information. When you register or are invited to use the Platform, we collect information such as your name, email address, and the name of your organization.

Inputs and content you provide. We collect and store the inputs, prompts, parameters, and other content you submit to run simulations (your “Inputs”). We retain your Inputs so that the Platform can function, including so you can review, reuse, and build on your past simulations.

Data you choose to upload. The Platform allows you to optionally upload your own data, which may include data about your customers or other individuals, to inform a simulation. You control what you upload. You are responsible for ensuring you have the necessary rights and permissions to provide that data to us and for it to be processed as described in this policy. Please do not upload sensitive personal information unless it is necessary and you are authorized to do so.

Usage information. We collect basic information about how you interact with the Platform, such as log data, device and browser information, and actions taken within the Platform, so we can operate, secure, and improve the service.

3. How we use information

We use the information we collect to:

  • Provide, operate, and maintain the Platform, including running your simulations and storing your Inputs and results;

  • Authenticate users and administer accounts;

  • Secure the Platform and detect, prevent, and address technical issues, fraud, or misuse;

  • Communicate with you about the Platform, including service-related messages;

  • Improve and develop the Platform and our services; and

  • Comply with legal obligations.

We do not use your Inputs or uploaded data to train models. Your Inputs and uploaded data are used to provide the service to you, not to train models. Simulation outputs are generated by processing your content through Amazon Web Services’ Bedrock service, which does not use your content to train any AI models and does not share it with the underlying model providers.

4. How simulations are processed, and third parties involved

To run simulations and operate the Platform, we rely on a limited number of third-party service providers (“Service Providers”) who process information on our behalf:

  • Cloud hosting and infrastructure. The Platform is hosted on Amazon Web Services (AWS). Your data is stored and processed on this infrastructure.

  • AI processing via AWS Bedrock. To generate simulation outputs, your Inputs (and, where you provide it, uploaded data used for a simulation) are processed through Amazon Web Services’ Bedrock service, which runs the AI models that produce results. Content processed through Bedrock is not used to train any AI models and is not shared with the underlying model providers.

These Service Providers are authorized to use the information only to provide services to us and are bound by obligations to protect it. We do not sell your personal information, and we do not share it with third parties for their own marketing purposes.

We may also disclose information if required by law, to respond to lawful requests, to protect our rights or the safety of others, or in connection with a merger, acquisition, financing, or sale of assets (in which case we will require the recipient to honor this Privacy Policy).

5. Data retention

We retain your account information, Inputs, uploaded data, and simulation results for as long as your account is active or as needed to provide the Platform, and thereafter as needed to comply with our legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your data as described in Section 7.

6. Security

We use reasonable administrative, technical, and organizational measures designed to protect the information we hold. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your choices and rights

You may access or update your account information, or request that we delete your account and associated data, by contacting us at contact@rebellabs.com.

Depending on where you are located, you may have additional rights under applicable data protection laws (for example, the EU/UK GDPR or the California Consumer Privacy Act), such as the right to access, correct, delete, or restrict the processing of your personal information, or to object to certain processing. To exercise any of these rights, contact us at contact@rebellabs.com. We will respond consistent with applicable law.

Where you upload data about other individuals, you are acting as the controller of that data and we process it on your behalf as described in this policy and any agreement between us. You are responsible for providing any required notices to, and obtaining any required consents from, those individuals.

8. International users and data transfers

We are based in the United States and process information in the United States. If you access the Platform from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States and other countries where we or our Service Providers operate, which may have different data protection laws than your country. Where required, we take steps to provide an appropriate level of protection for such transfers.

9. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the date above and, where appropriate, through the Platform or by email. Your continued use of the Platform after changes take effect constitutes acceptance of the updated policy.

10. Contact us

If you have questions about this Privacy Policy or our data practices, contact us at:

Rebel Labs, Inc. Email: contact@rebellabs.com