Privacy Policy
Last updated: 23 June 2026
Contents
1. Who we are & scope
This Privacy Policy explains how REACT Software, Inc. (“REACT,” “we,” “us,” or “our”) collects, uses, and protects personal information when you visit our website, contact us, request access to our investor data room, or otherwise interact with us. It does not cover the separate confidentiality terms that govern documents inside the investor data room, which are presented to you at sign-in.
2. Information we collect
Information you provide. When you use our contact form, request data-room access, or correspond with us, we collect the details you submit — typically your name, organization, role, email address, phone number, and any message content.
Investor portal credentials. If we grant you access to the data room, we process your email address and a one-time access code (which we store only as an irreversible cryptographic hash, never in plain text), together with the date and time you accept the applicable confidentiality terms.
Information collected automatically. When you access protected areas of the site, our servers log technical data such as your IP address, browser and device type, the documents you view, and timestamps. We use this for security, audit, and to operate the service.
We do not intentionally collect special categories of personal data (such as health, biometric, or government-ID information) through this website.
3. Cookies & similar technologies
We use only strictly necessary cookies — small files that keep you securely signed in to the investor data room and the administrative dashboard. These are essential to provide a service you have requested and, under applicable law, do not require opt-in consent.
We do not use analytics cookies, advertising or marketing cookies, social-media trackers, or any third-party tracking technologies. Because of this, we do not display a cookie-consent banner. If we introduce analytics or marketing technologies in the future, we will update this policy and provide a consent mechanism where required.
4. How we use information
- To respond to inquiries, briefings, pilot, partnership, and investor requests;
- To verify identity and administer access to the investor data room;
- To secure our systems, prevent abuse, and maintain access and audit logs;
- To comply with legal, regulatory, and contractual obligations; and
- To operate, maintain, and improve our website and services.
5. Legal bases (EEA/UK)
If you are located in the European Economic Area or the United Kingdom, we process personal data on the following legal bases: performance of a contract or steps taken at your request (e.g., providing data-room access); our legitimate interests in operating, securing, and growing our business (balanced against your rights); compliance with legal obligations; and, where required, your consent.
6. How we share information
We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising. We disclose information only:
- To service providers who process data on our behalf under contract — for example, our cloud hosting and infrastructure provider and our transactional email provider — solely to operate the service;
- For legal reasons, where disclosure is required by law, regulation, legal process, or a governmental request, or to protect our rights, safety, or property; and
- In a business transaction, such as a merger, acquisition, or financing, subject to appropriate confidentiality protections.
7. Data retention
We retain personal information for as long as necessary to fulfill the purposes described in this policy, including to satisfy legal, accounting, audit, or reporting requirements. Inquiry and access-request records, access logs, and confidentiality-acceptance records are retained for our standard business and compliance periods, after which they are deleted or anonymized.
8. Security
We protect information using technical and organizational measures appropriate to its sensitivity, including encryption in transit (HTTPS/TLS), hashing of access codes, signed session tokens, per-account access controls, document-level permissions, and access logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Your privacy rights
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information; to object to or restrict certain processing; and to withdraw consent. California residents have rights under the CCPA/CPRA, including the right to know, delete, and correct personal information and to be free from discrimination for exercising those rights; we do not sell or share personal information as those terms are defined under California law. To exercise any right, contact us using the details below. We will respond as required by applicable law, and you may appeal a decision or lodge a complaint with your local data-protection authority.
10. International transfers
We are based in the United States, and your information may be processed in the U.S. and other countries where we or our service providers operate. Where required, we use appropriate safeguards (such as the European Commission’s Standard Contractual Clauses) for international transfers.
This section concerns transfers of personal data under data-protection law. It is separate from export-control and sanctions laws (including the ITAR, EAR, and OFAC programs), which may govern access to and cross-border transfer of controlled technology, technical data, and materials. Those requirements are described in our Terms of Use.
11. Children’s privacy
Our website and services are intended for businesses and professionals and are not directed to children. We do not knowingly collect personal information from anyone under 18.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above, and material changes will be indicated on this page. Your continued use of the website after an update constitutes acceptance of the revised policy.
13. How to contact us
Questions, requests, or complaints about this policy or your personal information may be sent to:
REACT Software, Inc.
Email: info@reactsoftware.ai