Privacy Policy

Last Updated: May 6, 2026

Effective Date: May 6, 2026

1. Introduction

Welcome to RexLab. We are committed to protecting your personal information and respecting your right to privacy. This Privacy Policy explains how we collect, use, safeguard, and handle your data when you use our experimental web applications, including but not limited to RexInv and RexWapi.

2. Information We Collect

We only collect information that is strictly necessary to provide and improve our services. This includes:

  • Account Information: If you create an account, we may store your email address and a securely hashed password to facilitate authentication.
  • Third-Party Integrations (Google Services): Some of our applications may request access to your Google account via Google OAuth 2.0 to provide specific features.

3. Google API Services & User Data Policy

To provide automated workflows and integrations, RexLab applications may request restricted scopes from Google, specifically:

  • Google Sheets: To read, write, or format data within the specific spreadsheets you select or create via our tools.
  • Gmail: To automate specific email notifications or display message metadata as required by the application's functionality.

Limited Use Policy: RexLab's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We only request the minimum permissions necessary. We do not store your Google passwords or permanent access credentials on our servers. Authentication is handled securely and transiently via standard OAuth 2.0 tokens.

4. How We Use Your Data

Data retrieved from Google services or provided by you is used strictly within the context of the application you are operating. Specifically, we use your data to:

  • Provide, operate, and maintain the functionality of our applications.
  • Process transactions and send related administrative information.
  • Prevent fraudulent activity and maintain security protocols.

No Data Selling: We do not sell, trade, rent, or otherwise transfer your personal information or Google user data to outside parties for advertising or any other purposes.

5. Security Measures

We implement robust, industry-standard security measures to maintain the safety of your personal information. Our architecture includes:

  • Encrypted communication across all applications using HTTPS/SSL.
  • Secure, stateless authentication using JSON Web Tokens (JWT).
  • Environment-isolated databases running on minimal-footprint, edge-routed infrastructure.

6. Data Retention and Deletion

We retain your account information only for as long as your account is active or as needed to provide you with our services. Transient data (such as API responses from Google) is processed in real-time and is not permanently logged in our primary databases.

Your Right to be Forgotten: You have the right to request the deletion of your account and any associated data. To request data deletion, or to revoke RexLab's access to your Google account, please contact us or remove the app's access directly from your Google Account Security settings.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our experimental applications or legal requirements. We will notify users of any significant changes by updating the "Effective Date" at the top of this policy and, where appropriate, via email.

8. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us at:

Email: [email protected]