This addendum is part of the terms between you (the customer) and Revnix LLC. It applies when you put personal data into Rext AI for us to process on your behalf: you are the controller of that data and we are its processor. If you need a signed copy, write to contact@rext.ai.
Data processing addendum
The terms on which Revnix LLC processes personal data for customers of Rext AI, as GDPR Article 28 requires, and the list of companies that help us do it.
Last updated
What this addendum covers
The processing we do for you
- What and why: researching, writing, scoring, storing and publishing content, as you instruct through your use of Rext AI.
- How long: while your account exists, and then as the privacy policy describes.
- Kinds of personal data: names, job titles, biographies, photos and profile links in author personas; the names and email addresses of the people you invite; your WordPress site's address and connection key; and any personal data in the keywords, files, instructions and articles you give us.
- Whose data: your staff and the people you invite, the authors you describe, and the people named in your content.
What we commit to
- We process the data only on your documented instructions: these terms and what you do in the app. If we think an instruction breaks data protection law, we tell you.
- Everyone at Revnix who can reach the data is bound to keep it confidential.
- We protect it with the measures on the security page.
- We use the subprocessors below only under written terms that give the data the same protection.
- We help you answer requests from the people the data is about, and with security, breach notification and impact assessments, as far as our processing allows.
- If we become aware of a breach of personal data we process for you, we tell you without undue delay.
- When your account ends, we delete the data, as the privacy policy describes; before that, you can copy your articles.
- We give you the information you need to show that these commitments are met, and allow reasonable audits, with notice, at your cost, no more than once a year.
The companies that help us
You allow us to use these subprocessors.
| Company | What it does for us | Data it handles | Based in |
|---|---|---|---|
| Hetzner Online GmbH | Servers and databases for the app, and the database of rext.ai | All account data and content | Germany |
| OpenAI (OpenAI OpCo, LLC; OpenAI Ireland Ltd. for customers in the EEA and Switzerland) | Writes the text and the images | What each article is written from: keyword, outline, research, brand and persona details | United States; Ireland |
| Tavily (AlphaAI Technologies Inc.) | Web research for each article | Search queries made from your topic | United States |
| DataForSEO OÜ | Search results and keyword data | Your keywords and target country | Estonia |
| LangChain, Inc. (LangSmith) | Records of each writing run, to find and fix problems | The run's inputs and outputs | United States |
| Functional Software, Inc. (Sentry) | Error reports from the app | Technical details of an error, which can include an account's ID or IP address | United States |
| Plus Five Five, Inc. (Resend) | Email from the app | Your name, email address and the email's content | United States |
| Link, LLC, formerly Lemon Squeezy LLC | Payments, as the merchant of record | Your billing details | United States |
| Vercel Inc. | Hosts rext.ai | Visitors' requests, including IP addresses | United States |
| PostHog Inc. | Analytics for rext.ai, on its EU cloud in Frankfurt | Pages viewed and the analytics identifier | United States (data in Germany) |
| Sendinblue SAS (Brevo) | The newsletter | The email address you subscribe with | France |
| Calendly, LLC | Demo bookings | What you enter when you book | United States |
Before we add or replace a subprocessor, we update this list at least 14 days ahead. If you object on reasonable data protection grounds, write to us within that time; if we cannot meet the objection, you may end your subscription.
Data sent outside the EEA
Where personal data from the EEA, the UK or Switzerland goes to a country without an adequacy decision, the transfer relies on the European Commission's standard contractual clauses or on the receiving company's certification under the EU-US Data Privacy Framework.
Start with one keyword.
Run it on your own site. Read the sources. Decide with the article in front of you, not a promise.
No card to start · Cancel anytime
Not ready? Twenty-one free tools, no account. All twenty-one