RehabOS, Inc. (“RehabOS”, “we”, “us”) operates the RehabOS web application at app.rehabos.ai. This policy explains what data we collect, how we use it, and your rights.
Account data — your name and email address when you sign up.
Project data — property addresses, purchase prices, ARVs, loan details, budget line items, expenses, contractor names and contact information, and W-9 documents you upload. This data is entered by you and stored on your behalf.
Usage data — pages visited, features used, and AI queries sent (we log query text to improve the product). We do not sell this data.
Receipt images — photos you upload for AI scanning are sent to Anthropic’s API for processing and are not stored by RehabOS, Inc. after the scan completes.
W-9 documents — files you upload are stored securely in Supabase Storage, accessible only to your account.
We do not sell your data. We do not use your project financial data for advertising.
We use the following sub-processors to operate the service:
Each sub-processor is bound by their own data processing agreements and privacy policies.
If you use the contractor messaging features (SMS / WhatsApp links), messages are sent directly from your device — we do not transmit or store the content of those messages. You are responsible for obtaining prior express written consent from contractors before sending them text messages, as required by the Telephone Consumer Protection Act (TCPA).
We retain your data for as long as your account is active. If you delete your account, we will delete your personal data and project data within 30 days, except where retention is required by law.
You may request access to, correction of, or deletion of your personal data at any time by emailing hello@rehabos.ai. We will respond within 30 days.
If you are located in California, you have additional rights under the CCPA, including the right to know what personal information we collect and the right to request deletion.
If you are located in the EU or UK, you have rights under GDPR including the right to data portability and the right to lodge a complaint with your local supervisory authority.
We use row-level security on our database, encrypted storage, and HTTPS for all data in transit. We follow Supabase and Vercel security best practices. No system is perfectly secure — please use a strong password and do not share your account credentials.
We may update this policy from time to time. We will notify you of material changes by email or by a notice in the application at least 14 days before they take effect.
Questions? Email us at hello@rehabos.ai.
RehabOS · RehabOS, Inc. · Last updated June 25, 2025