← Back to Rex

Privacy Policy

Last updated: March 2026

1. Who we are

Rex ("we", "us", "our") is a product of DelegateMe, operated out of Malaysia. Rex is a WhatsApp lead management and messaging platform for sales teams and businesses. This policy explains how we handle your data when you use our service at rex.delegateme.com.

2. Data we collect

We collect the following categories of data:

Account information

When you sign up, we collect your name, email address, and phone number. This is used to create and manage your account.

Lead data

You upload or manually enter contact information for your leads, including names, phone numbers, notes, tags, and lead type. This data is provided by you and stored on your behalf.

WhatsApp session data

When you connect your WhatsApp account to Rex, we store a session identifier and connection status. We do not store your WhatsApp password. Messages sent and received through Rex are temporarily stored to power your inbox, conversation history, and reply tracking features.

Campaign and message data

We store the templates you create, campaigns you send, delivery status, and reply tracking data. This powers your dashboard, analytics, and follow-up reminders.

Conversation data

To provide your inbox and conversation features, we temporarily store recent message content (both sent and received) associated with your leads. This data is automatically deleted on a rolling basis and is not retained long-term. We do not read, analyse, or share your conversation content — it is stored solely to display it back to you within the app.

Usage data

We collect basic usage analytics such as pages visited, features used, and error logs. This helps us improve the product. We do not use third-party tracking scripts.

3. How we use your data

We use your data to:

  • Provide and operate the Rex service
  • Send WhatsApp messages on your behalf when you initiate campaigns
  • Track message delivery and replies for your dashboard
  • Send follow-up reminders based on your configured rules
  • Communicate with you about your account, updates, or support
  • Improve the product based on aggregated usage patterns

We do not sell your data to third parties. We do not use your lead data or message content for advertising purposes.

4. Data storage and security

Your data is stored on secure cloud infrastructure in the Asia Pacific region.

We implement industry-standard security measures including encrypted connections (HTTPS/TLS), row-level security on database tables, per-session HMAC webhook verification, and secure authentication via Supabase Auth. Access to production infrastructure is restricted and protected by strong credentials.

5. Third-party services

We use trusted third-party service providers for hosting, database, authentication, and infrastructure. Each provider has their own privacy policies and security practices, and we select providers that meet our data protection standards.

6. WhatsApp compliance

Rex facilitates sending messages through your own WhatsApp account. You are responsible for complying with WhatsApp's Terms of Service and acceptable use policies. Rex is not affiliated with, endorsed by, or officially connected to WhatsApp or Meta Platforms, Inc.

We stagger message delivery to align with WhatsApp's rate expectations and help protect your account. However, ultimate responsibility for how you use WhatsApp lies with you.

7. Data retention

Your data is retained for as long as your account is active. Conversation message data is automatically cleaned up on a rolling basis — we only keep recent messages to power your inbox and are not in the business of storing your chat history long-term.

If you delete your account, we will delete your personal data, lead data, campaigns, and message history within 30 days. Some data may be retained in encrypted backups for up to 90 days before being permanently removed.

Please note that we do not offer data exports, downloads, or transfers of your data in any form — whether your account is active or deleted. We are unable to provide copies of your data upon request. Once your account is deleted, your data cannot be recovered.

8. Your rights

You have the right to:

  • Correction — update or correct your personal data through the app
  • Deletion — delete your account and all associated data from the Settings page
  • Withdrawal — stop using the Service at any time

As noted above, we do not provide data exports or downloadable copies of your data. For any questions, contact us at support-rex@delegateme.ai.

9. Cookies

Rex uses cookies to operate the Service, including for authentication and preferences. We may update the types of cookies we use at any time as the Service evolves.

10. Changes to this policy

We may update this privacy policy at any time without prior notice. It is your responsibility to review this page periodically. Continued use of Rex after any changes constitutes acceptance of the updated policy.

11. Contact us

If you have questions about this privacy policy or how we handle your data, contact us at: support-rex@delegateme.ai