Get Rebecca

Rebecca

Privacy Policy

Last updated: 16 September 2026 · Effective date: 16 September 2026

1. Who we are

Rebecca AI Limited ("Rebecca", "we", "us", "our") is the data controller responsible for your personal data in connection with the Rebecca website and the Rebecca WhatsApp service. We are a company registered in England and Wales under company number 17449518 with our registered office at 1110 Elliott Court Coventry Business Park, Herald Avenue, Coventry, West Midlands, CV5 6UB. You can contact us about privacy matters at info@rebecca.app.

We are registered with the UK Information Commissioner's Office (ICO).

2. What this policy covers

This policy explains what personal data we collect when you visit our website, sign up for Rebecca, or use Rebecca via WhatsApp, why we collect it, who we share it with, and the rights you have over it. It applies alongside our Cookie Policy, which covers cookies and similar technologies used on our website.

3. Information we collect

Account and contact information

  • Your name, business name, email address and mobile number (used to connect you to Rebecca on WhatsApp).
  • Billing details processed on our behalf by our payment provider (see Section 6).

Accounting and financial data

  • Data from your connected accounting software (currently Xero, with QuickBooks and Sage planned), including transactions, invoices, contacts, bank feed data and account balances, to the extent needed to answer your questions and carry out the actions you ask for.
  • Receipts, images and documents you send to Rebecca, which may contain personal data about you, your staff, or your customers and suppliers.

Communications data

  • The content of messages, voice notes and images you send to and receive from Rebecca via WhatsApp, together with associated metadata (timestamps, delivery status).

Website usage data

  • Standard technical data collected when you visit our website: IP address, browser and device type, pages viewed and referring pages, collected via cookies and similar technologies as set out in our Cookie Policy.

4. How we use your information

  • To provide and operate the Rebecca service, including answering your questions, creating and sending invoices, and matching receipts to transactions in your accounting software.
  • To communicate with you about your account, including service updates, billing, and support.
  • To process payments for your subscription.
  • To maintain the security, integrity and proper functioning of our service, including detecting and preventing fraud or misuse.
  • To improve Rebecca, including understanding how the service is used (in aggregated or anonymised form wherever possible).
  • To comply with our legal and regulatory obligations, including tax, accounting and record-keeping requirements.
  • With your consent, to send you marketing communications about Rebecca. You can withdraw this consent at any time.

5. Our legal basis for processing

Under UK GDPR, we rely on the following legal bases:

  • Performance of a contract — to provide the Rebecca service you have subscribed to.
  • Legitimate interests — to secure and improve our service, prevent fraud, and communicate essential service information, balanced against your rights and interests.
  • Legal obligation — to meet accounting, tax and regulatory requirements.
  • Consent — for optional marketing communications and non-essential cookies, which you may withdraw at any time.

6. How we share your information

We do not sell your personal data. We share personal data with the following categories of recipient, only as needed to provide the service:

  • Meta / WhatsApp — messages you send to Rebecca are transmitted using the official WhatsApp Business API, which is subject to Meta's own terms and privacy policy.
  • Accounting software providers — Xero (and, when available, QuickBooks and Sage) receive the data needed to keep your books up to date, under your own connection permissions.
  • Payment processor — Stripe processes your subscription payments on our behalf.
  • Cloud hosting and infrastructure providers — Vercel stores data on our behalf under contractual data protection terms.
  • Professional advisors, auditors and regulators, where necessary.
  • Law enforcement or other authorities, where we are legally required to disclose information.
  • A buyer or successor, in the event of a merger, acquisition or sale of assets, subject to equivalent protections.

7. International data transfers

Some of our providers, including Meta, may process data outside the UK and European Economic Area. Where this happens, we ensure appropriate safeguards are in place, such as the UK's International Data Transfer Agreement or the EU Standard Contractual Clauses, or reliance on an adequacy decision. Further detail is available on request from info@rebecca.app.

8. Data retention

We retain personal data for as long as your account is active, and afterwards only for as long as necessary to comply with our legal obligations (including the statutory retention periods that apply to accounting and tax records, typically six years in the UK), resolve disputes, and enforce our agreements. We will delete or anonymise personal data when it is no longer needed for these purposes.

9. Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Request erasure of your data, subject to legal retention requirements.
  • Restrict or object to certain processing.
  • Request a portable copy of your data.
  • Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at info@rebecca.app. You also have the right to lodge a complaint with the Information Commissioner's Office (ico.org.uk) if you believe we have not handled your data properly.

10. Security

We use appropriate technical and organisational measures to protect personal data, including encryption of data in transit, access controls, and the use of the official WhatsApp Business API rather than personal WhatsApp accounts. No system is completely secure, and we cannot guarantee absolute security, but we take reasonable steps to protect your information and to respond promptly to any suspected breach.

11. Children's privacy

Rebecca is a business tool intended for use by business owners aged 18 and over. We do not knowingly collect personal data from children, and the service is not directed at them.

12. Cookies

Our website uses cookies and similar technologies. Full details are set out in our separate Cookie Policy.

13. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or for legal or regulatory reasons. We will post the updated version on our website with a new "last updated" date, and where changes are material, we will take reasonable steps to notify you.

14. Contact us

If you have any questions about this Privacy Policy or how we handle your data, contact us at info@rebecca.app or by post at 1110 Elliott Court, Coventry Business Park, Herald Avenue, Coventry, West Midlands, CV5 6UB.