ReWild Quickstart Privacy Policy

Privacy Policy

Automated Conversational AI Services

Effective Date: October 1, 2026

Last Updated: October 1, 2026

Operated by: The ReWild Group LLC (“Company,” “we,” “us,” or “our”)

Registered Office: 2205 W 136th Ave, STE 106-322, Broomfield, CO 80023, USA

This Privacy Policy explains how The ReWild Group LLC collects, uses, discloses, and safeguards personal and business information when you interact with our automated conversational assistants (such as ReWild QuickStart, collectively the “Service”).

Categories of Information We Collect

We adhere to data minimization principles and collect information in two ways.

A. Information You Voluntarily Provide

  • Anonymous by Default: Chat interactions are anonymous to us unless and until you voluntarily choose to provide your contact details (such as requesting a conversation transcript or an advisor consultation).

  • Conversational Content: Information submitted during your chat, including your business description, industry context, operational challenges, and approximate employee headcount (Full-Time Equivalents – FTE).

  • Prohibited Submissions Warning: You should not enter sensitive personal identifiers (Social Security numbers, payment card details, health records) or confidential company trade secrets into the chat. See Section 3 of our Terms of Use for the full list of prohibited submissions.

  • Contact Details (Optional): If you voluntarily choose to receive an assessment transcript or request that an advisor follow up with you, we collect your email address, phone number, and name.

B. Information Collected Automatically

  • Rate-Limiting & Security Identifiers: For abuse prevention, volumetric attack mitigation, and per-minute rate limiting, our servers derive and store a salted or keyed pseudonymous identifier from your IP address. We do not intentionally retain the raw IP address in our primary application database, except where transient processing, web server, CDN, or cloud infrastructure logs may record it temporarily as necessary for security, operations, or legal compliance.

  • Technical & Device Metadata: Browser User-Agent, device platform, interaction timestamps, session duration, and operational model telemetry (token counts and response latency).

  • Session Display Cache: We use your browser’s temporary window.sessionStorage solely to preserve your visible chat transcript across page reloads. This data is automatically erased when you close your browser tab. We do not deploy advertising, tracking, or persistent third-party cookies through the chat widget.

Business Purposes for Processing Your Information

We process collected information for the following legitimate business purposes:

  • Assessment Generation: Evaluating your operational context against organizational growth frameworks to deliver non-binding, preliminary diagnostic observations.

  • Fulfillment of Requests: Emailing your requested conversation transcript and diagnostic summary.

  • Direct Advisor Follow-Up: Enabling a ReWild advisor or executive (such as our CEO or certified advisory team) to contact you directly to discuss your growth assessment and answer your business inquiries.

  • Service & Product Improvement: Conducting aggregated, de-identified research and analytical evaluation to refine conversational prompts, improve diagnostic accuracy, optimize the underlying organizational framework, and enhance our overall software and services.

  • Security & System Integrity: Detecting, investigating, and preventing malicious activity, denial-of-service attempts, prompt-injection attacks, and unauthorized system access.

  • Operational Auditing & Diagnostics: Tracking service latency, system performance, token expenditures, and model error rates (ensuring user text is omitted from telemetry logs).

Categories of Recipients & Data Disclosures

We do not sell your personal data or share it with third parties for cross-context behavioral advertising. We disclose information only to the following categories of service providers and third parties:

1. Artificial Intelligence Inference Providers: We use commercial artificial intelligence application programming interfaces (APIs) and large language model providers to evaluate conversational inputs and generate natural language responses. Our current inference provider is OpenAI. Each provider’s handling, processing, and retention of API data is governed by its enterprise services agreement, data processing terms, and security documentation in effect at the time of processing. We access these services exclusively through commercial developer APIs and configure available data-control options appropriate to our service design; under applicable commercial API terms, customer inputs and generated outputs are not used by third-party inference providers to train or fine-tune artificial intelligence models. We will update this Policy before adding any materially different inference provider.

2. Technical Development & Managed Service Providers: Specialized software engineering, AI consultancy, and hosting partners operating in the United States and Canada that develop, operate, monitor, and support the application, database, and underlying infrastructure under strict written confidentiality and data processing agreements.

3. Cloud Infrastructure, Database & Monitoring Providers: Cloud hosting, database storage, and operational logging providers located in the United States that store application records and protect system reliability under written data protection terms.

4. Email Delivery Providers: Transactional email services utilized to transmit assessment transcripts and notifications.

5. Professional Advisors & Legal Authorities: External legal counsel, accountants, insurers, or law enforcement authorities when strictly required by applicable subpoena, law, or to defend legal claims.

6. Corporate Successors: Prospective or actual buyers, successors, or assignees in the event of a merger, acquisition, corporate restructuring, financing, or sale of company assets.

Data Retention & Storage Policy

  • Chat Transcripts: Conversation logs are retained in our application database for as long as necessary to maintain system auditability, support user follow-up requests, evaluate framework performance, and fulfill legitimate business purposes.

  • Lead Contact Details: Contact information provided in connection with a transcript request is retained in our lead records to facilitate direct business communication with our advisory team.

  • Client Storage: Browser sessionStorage is ephemeral and is cleared upon tab closure.

  • De-Identification & Disposal: When personal information is no longer needed for business or legal purposes, we implement commercially reasonable measures to delete, overwrite, or de-identify it.

Your Privacy Rights & Colorado Rights Workflow

If you are a resident of Colorado (or another state with applicable comprehensive privacy statutes such as California, Virginia, or Connecticut), you may have specific statutory rights regarding your personal data. Even where statutory business-size thresholds (such as the Colorado Privacy Act’s) may not apply to our current operational scale, we voluntarily provide a transparent rights workflow.

A. Available Privacy Rights

  • Right to Access / Know: You have the right to confirm whether we process your personal data and to obtain a copy of the specific pieces of personal data we hold about you.

  • Right to Correction: You have the right to correct inaccuracies in your personal data.

  • Right to Deletion: You have the right to request the deletion of personal data you provided or that we collected.

  • Right to Data Portability: You have the right to obtain your personal data in a portable, readily usable format.

  • Right to Opt Out: You have the right to opt out of the sale of personal data, targeted advertising, or profiling that produces legal or similarly significant effects. (Note: We do not sell your personal data or engage in targeted advertising or profiling with legal effects.)

B. How to Submit a Request

You or your legally authorized agent may submit a verified privacy request by:

  • Online Contact Form: Submitting a request via our contact form at https://www.rewildgroup.com/contact (include “Privacy Rights Request” in your submission message).

  • Mail: Writing to our physical address listed in Section 8 below.

C. Verification Procedure

To protect your privacy and security, we must verify your identity before fulfilling any request. Because ReWild QuickStart does not maintain authenticated user accounts, verification typically involves confirming that you have control over the specific email address submitted during your chat session. We will not fulfill deletion or access requests if we cannot reasonably associate your identity with the requested record.

D. Response Timeline

  • We will acknowledge receipt of your request within ten (10) business days.

  • We will respond substantively within forty-five (45) calendar days of receipt. If an extension is reasonably necessary due to the complexity or volume of requests, we may extend the response period by an additional forty-five (45) days, providing notice and explanation within the initial 45-day window.

E. Appeals Process

If we deny your request in whole or in part, you have the right to appeal our decision within forty-five (45) days of receiving our denial notice.

  • How to Appeal: Submit an appeal online via our contact form at https://www.rewildgroup.com/contact detailing your original request and why you believe the denial was in error.

  • Appeal Timeline: We will review your appeal and respond in writing within forty-five (45) calendar days, explaining our resolution and reasons.

  • State Attorney General Notice: If your appeal is denied and you are a Colorado resident, you may submit a complaint directly to the Colorado Attorney General at: Colorado Department of Law, Consumer Protection Section, 1300 Broadway, 9th Floor, Denver, CO 80203 (https://coag.gov).

Children’s Privacy

ReWild QuickStart is designed strictly for commercial B2B evaluation by adult professionals. The Service is not intended for, and we do not knowingly solicit or collect personal data from, individuals under eighteen (18) years of age, or children under thirteen (13) under the US Children’s Online Privacy Protection Act (COPPA).

Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy at our discretion. The “Last Updated” date at the top indicates when the latest revisions took effect. We encourage periodic review of this policy.

Contact Information

For questions, requests, or privacy inquiries, contact:

The ReWild Group LLC

Attn: Privacy Officer

Postal Address: 2205 W 136th Ave, STE 106-322, Broomfield, CO 80023, USA

Online Contact Form: https://www.rewildgroup.com/contact