Privacy Notice

Last updated: June 8, 2026

This Privacy Notice explains how Rehla ("Rehla", "we", "us", "our") collects, uses, and shares personal data when you use our website and AI-powered office suite (the "Service").

1. Who we are

Rehla operates the Service. Rehla is the data controller for personal data processed in connection with your use of the Service. You can contact us at privacy@rehla.ai.

2. Personal data we collect

Account data — name, email address, login credentials.
Content you create or upload — prompts, presentations, documents, spreadsheets, and template files.
Support messages — messages you send us when requesting help.
Usage and telemetry — pages viewed, features used, AI generation events, error reports.
Device and connection data — IP address, browser type, operating system, device identifiers.

3. How we use personal data

To create and manage your account.
To provide, maintain, and improve the Service.
To generate, store, and export the AI files you request.
To prevent fraud and abuse and to keep the Service secure.
To provide customer support and respond to your requests.
To send service-related communications (e.g. account, security, billing notices).
To comply with legal obligations.

4. Legal bases

We rely on the following legal bases: (a) performance of a contract with you, (b) our legitimate interests in operating and improving the Service and preventing abuse, (c) your consent where required, and (d) compliance with legal obligations.

5. Sharing your personal data

We share personal data only with:

Service providers and subprocessors — hosting, database, analytics, error monitoring, customer support tooling, and AI model providers used to generate content from your prompts.
Paddle.com Market Limited ("Paddle") — our Merchant of Record. Paddle processes payments, subscription management, billing, tax compliance, and invoicing on our behalf.
Professional advisers — legal, accounting, and similar advisers under confidentiality.
Authorities — where required by applicable law, regulation, court order, or to protect our rights.

6. International data transfers

Personal data may be processed outside your country of residence, including in the United States and the European Economic Area. Where required, we use appropriate safeguards such as Standard Contractual Clauses.

7. Data retention

We retain personal data for as long as your account is active or as needed to provide the Service. We may retain limited data afterward to comply with legal obligations, resolve disputes, or enforce our agreements. Account content is deleted or anonymised when no longer needed.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent. You may also have the right to lodge a complaint with your local data protection authority. To exercise your rights, email privacy@rehla.ai.

9. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls, and least-privilege practices — to protect personal data. No system is fully secure; we cannot guarantee absolute security.

10. Cookies

We use cookies and similar technologies that are strictly necessary to operate the Service (e.g. authentication, session management) and limited analytics to understand usage. You can control cookies through your browser settings.

11. Children

The Service is not directed to children under 16. We do not knowingly collect personal data from children.

12. Changes to this notice

We may update this notice from time to time. We will post the updated version on this page with a new "Last updated" date.

13. Contact

For questions about this Privacy Notice, email privacy@rehla.ai.