Privacy Policy

This Privacy Policy describes how [COMPANY LEGAL NAME] (“Rush Media,” “we,” “us,” or “our”), a company based in the State of Nevada, collects, uses, discloses, and protects personal information. It applies to:

• our website at rushmediateam.com and any page that links to this policy (the “Site”);
• the marketing production, web development, and business strategy services we provide to clients (the “Services”); and
• the software applications we build and operate, including CAC Guard, AdCannon, SwipeLounge, CartRush, RushX, RevCart, AdEcho, Gala, Mirage, O2, Calibr, Stockd, HireHub, and Project Echo (each a “Product” and together the “Products”).

If a Product or client agreement has its own privacy notice, that notice applies alongside this one and controls where the two conflict. By using the Site, Services, or Products, you acknowledge the practices described here.

1. Our role: controller and processor

For personal information we collect for our own purposes — for example, when you contact us or create an account on a Product — we act as the business or “controller.”

When we handle personal information on behalf of an agency client (for example, customer lists a client provides for a campaign, or data a client’s end users submit through an app we built for them), we act as a “service provider” or “processor.” In that case we process the information only on the client’s instructions and under our agreement with them, and the client’s own privacy policy governs its use. If you are a client’s customer and want to exercise privacy rights, please contact that client directly; we will assist them as required.

2. Information we collect

Information you provide to us

• Contact and inquiry information — your name, email address, company, the service you’re interested in, and the contents of your message when you use our contact form or email us.
• Client and business information — contact details for client personnel, billing and contract information, and materials clients provide for a project (such as brand assets, product information, footage, and copy).
• Account information — when you use a Product, your name, email address, login credentials, organization, role, and preferences.
• User content — material you upload, save, generate, or submit in a Product, such as ads, creative assets, comments and approvals, prompts and AI-generated outputs, performance review content, equipment records, contractor profiles, and connected social media account content.
• Privacy requests — the information you provide when you submit a request on our Your Privacy Rights page.
• Talent and contractor information — if you apply to work with us or are recruited through a Product, information such as your name, contact details, portfolio, work history, and rates.

Information collected automatically

• Usage and device information — pages visited, referring page, approximate location derived from IP address, browser and device type, and performance measurements. On the Site we use Vercel Web Analytics and Speed Insights, which report aggregated usage and performance data and do not use cookies to identify you.
• Log information — IP addresses, timestamps, and request details recorded by our hosting infrastructure for security, rate limiting, and troubleshooting.
• Product telemetry — in the Products, information about how features are used, errors, and actions taken within your account.
• Cookies and similar technologies — described in our Cookie Policy.

Information from third parties

• Connected platforms — if you connect a Product to a third-party platform (for example, an advertising account, an ecommerce store, or a social media account), we receive the information that platform makes available under the permissions you grant, such as account identifiers, campaign and ad data, order and customer data, and posts and engagement metrics.
• Publicly available information — some Products collect publicly available advertising content and the associated advertiser information for research and analysis.
• Clients and partners — information our clients or business partners provide to us in connection with a project.

3. How we use information

• To respond to inquiries, arrange calls, and communicate with you.
• To provide, scope, perform, and bill for the Services.
• To operate, maintain, secure, and improve the Site and Products, including customer support.
• To create and manage accounts and authenticate users.
• To process user content at your direction, including generating AI outputs you request.
• To detect, prevent, and respond to fraud, abuse, spam, and security incidents.
• To send service-related and administrative messages.
• To send marketing communications where permitted by law. You can opt out at any time using the unsubscribe link or by contacting us.
• To comply with legal obligations and enforce our agreements.
• To create aggregated or de-identified information that can no longer reasonably identify you.

We do not use personal information contained in client materials or connected-platform data to train general-purpose AI models for use by other customers. Where a Product uses a third-party AI model to generate content, the inputs you submit are sent to that provider to produce your output under terms that restrict its use of the data.

4. Legal bases (EEA, UK, and Switzerland)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on:

• Contract — to provide the Services and Products you or your organization requested;
• Legitimate interests — to respond to inquiries, secure and improve our Site and Products, and market our Services to business contacts, where those interests are not overridden by your rights;
• Consent — for optional cookies and certain marketing, which you can withdraw at any time; and
• Legal obligation — where processing is required by law.

5. How we share information

We do not sell personal information for money. We share personal information only as follows:

• Service providers — vendors that perform services for us under contract, such as website hosting and analytics (Vercel), transactional email delivery (Resend), cloud infrastructure, payment processing, customer support tools, and AI model providers. They may use personal information only to provide services to us.
• Clients — when we act as a service provider, we share project information with the client on whose behalf we process it.
• Connected platforms — when you direct a Product to publish, upload, or sync content with a third-party platform, we send the information needed to carry out that action.
• Other users in your organization — user content in a Product may be visible to other users in the same workspace or organization according to its settings.
• Affiliates — companies under common ownership or control with us, for purposes consistent with this policy.
• Legal and safety — when required by law or legal process, or when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Rush Media, our users, or others.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.
• With your consent — or at your direction.

6. Categories of personal information (California notice at collection)

In the past 12 months, we have collected the following categories of personal information, as defined by the California Consumer Privacy Act (“CCPA”):

We collect this information from the sources described in Section 2, for the purposes described in Section 3. We do not knowingly collect sensitive personal information for the purpose of inferring characteristics about you. We do not “sell” personal information or “share” it for cross-context behavioral advertising, as those terms are defined under the CCPA, and we have not done so in the past 12 months. We do not knowingly sell or share the personal information of consumers under 16.

7. Retention

We keep personal information for as long as needed for the purposes described in this policy: inquiry information for as long as needed to respond and maintain our business relationship; client and project records for the duration of the engagement plus the period required for legal, tax, and accounting purposes; and Product account information and user content for as long as your account is active, after which we delete or de-identify it within a reasonable period unless we are required to keep it. Clients may request deletion of project materials in accordance with their agreement.

8. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and least-privilege access for our team and vendors. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we learn of a security breach affecting your personal information, we will notify you and regulators as required by law, including Nevada Revised Statutes Chapter 603A.

9. Your privacy rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information; to opt out of sale, sharing, targeted advertising, or profiling; to limit the use of sensitive personal information; to object to or restrict processing; to withdraw consent; and to appeal our decision on a request. Our Your Privacy Rights page explains these rights and how to exercise them. We will not discriminate against you for exercising them.

Nevada residents

Nevada law (NRS 603A.300–603A.360) permits Nevada consumers to request that an operator not sell covered information it has collected or will collect. We do not sell covered information as defined by Nevada law. You may nonetheless submit a request by using our privacy request form or emailing [EMAIL], and we will record your request. You may also review and request changes to the covered information we hold about you through the same channels.

10. Tracking across sites and Do Not Track

We do not allow third parties to collect personally identifiable information about your online activities over time and across different websites when you use the Site. Because there is no common industry standard for “Do Not Track” browser signals, we do not respond to them. We do treat a Global Privacy Control (GPC) signal as a valid request to opt out of sale and sharing for the browser sending it.

11. Children

The Site, Services, and Products are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children under 13 (or under 16 where applicable law sets a higher age). If you believe a child has provided us personal information, contact us and we will delete it.

12. International transfers

We are based in the United States, and we and our service providers process information in the United States and other countries. Where we transfer personal information from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy mechanism recognized by the applicable authority.

13. Third-party sites and platforms

The Site and Products may link to or integrate with third-party websites and platforms. Their handling of your information is governed by their own privacy policies, and we are not responsible for their practices.

14. Changes to this policy

We may update this policy from time to time. When we do, we will revise the effective date above, and for material changes we will provide additional notice — such as a notice on the Site or an email to account holders — before the change takes effect.

15. Contact us

Questions about this policy or our privacy practices can be sent to:

[COMPANY LEGAL NAME]
[ADDRESS]
Email: [EMAIL]