Last updated: March 2026
Rex ("we", "us", "our") is a product of DelegateMe, operated out of Malaysia. Rex is a WhatsApp lead management tool built for property agents. This policy explains how we handle your data when you use our service at rex.delegateme.com.
We collect the following categories of data:
Account information
When you sign up, we collect your name, email address, and phone number. This is used to create and manage your account.
Lead data
You upload or manually enter contact information for your leads, including names, phone numbers, notes, tags, and lead type. This data is provided by you and stored on your behalf.
WhatsApp session data
When you connect your WhatsApp account to Rex, we store a session identifier and connection status. We do not store your WhatsApp password. Messages sent and received through Rex are logged for campaign tracking and follow-up purposes.
Campaign and message data
We store the templates you create, campaigns you send, delivery status, and reply tracking data. This powers your dashboard, analytics, and follow-up reminders.
Usage data
We collect basic usage analytics such as pages visited, features used, and error logs. This helps us improve the product. We do not use third-party tracking scripts.
We use your data to:
We do not sell your data to third parties. We do not use your lead data or message content for advertising purposes.
Your data is stored on Supabase (hosted on Amazon Web Services) with servers in the Asia Pacific region. WhatsApp session processing runs on AWS infrastructure in Singapore (ap-southeast-1), the closest region to Malaysia.
We implement industry-standard security measures including encrypted connections (HTTPS/TLS), row-level security on database tables, per-session HMAC webhook verification, and secure authentication via Supabase Auth. Access to production infrastructure is restricted and protected by strong credentials.
We use the following third-party services to operate Rex:
Each of these providers has their own privacy policies and security practices. We select providers that meet our security and data protection standards.
Rex facilitates sending messages through your own WhatsApp account. You are responsible for complying with WhatsApp's Terms of Service and acceptable use policies. Rex is not affiliated with, endorsed by, or officially connected to WhatsApp or Meta Platforms, Inc.
We stagger message delivery to align with WhatsApp's rate expectations and help protect your account. However, ultimate responsibility for how you use WhatsApp lies with you.
Your data is retained for as long as your account is active. If you delete your account, we will delete your personal data, lead data, campaigns, and message history within 30 days. Some data may be retained in encrypted backups for up to 90 days before being permanently removed.
In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), you have the right to:
To exercise any of these rights, contact us at support-rex@delegateme.ai.
Rex uses essential cookies only — specifically, an authentication session cookie and a theme preference cookie. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
We may update this privacy policy from time to time. If we make material changes, we will notify you via email or an in-app notice. Continued use of Rex after changes constitutes acceptance of the updated policy.
If you have questions about this privacy policy or how we handle your data, contact us at: support-rex@delegateme.ai