Echo AI LLC (“Echo AI,” “we,” “us,” or “our”) provides Rally, a group-buying service for merchants, organizers, and shoppers. This Privacy Policy explains how we collect, use, disclose, and protect information when you use the Rally website, Rally services, and the Rally connector for Muse (collectively, the “Services”).
1. Information we collect
Information you provide
We may collect:
- Account and contact information: Such as your name, email address, account role, business name, and login or authentication details.
- Merchant information: Such as store details, product and deal information, group targets, deadlines, organizer-reward terms, fulfillment terms, and merchant dashboard settings.
- Group-buy information: Such as groups created or joined, deal selections, group status, paid-participant status, communications, and organizer activity.
- Order-related information: Such as the product, quantity, price, payment status, merchant, and information needed for the merchant to process or fulfill an order.
- Support information: The content of messages, requests, and other information you send when you contact us.
Payment information
Payments for products go directly to the merchant or the merchant’s payment provider. Rally does not take possession of customer purchase funds. Rally never holds or stores full payment-card numbers. The merchant and its payment provider process payment credentials under their own terms and privacy notices. Rally may receive limited transaction information, such as payment status, order amount, merchant, and a transaction reference, so it can update group progress and provide the Services.
Information collected automatically
When you use the Services, we may collect device and usage information, including IP address, browser type, device type, operating system, pages viewed, actions taken, referring pages, approximate location derived from IP address, and dates and times of access. We may use cookies and similar technologies for authentication, security, preferences, service operation, and analytics.
Information from connected services
If you connect Rally to Muse or another compatible service, we may receive the account identifiers, instructions, and contextual information needed to complete your request. We receive only the information made available through that connection and your use of it.
2. How we use information
We may use information to:
- Provide, maintain, secure, and improve the Services.
- Create and manage accounts, deals, groups, and merchant dashboards.
- Track paid participation and determine whether published group goals are met.
- Send service messages, deadline reminders, support replies, and security notices.
- Display merchant-published deal terms and organizer rewards.
- Produce analytics about a merchant’s own deals, including filled and unfilled groups, progress toward targets, and product performance.
- Complete requests made through Muse or another connected service.
- Detect fraud, abuse, security incidents, and violations of our Terms of Service.
- Comply with law, enforce agreements, and protect users, Echo AI, and others.
- Create aggregated or de-identified information that does not reasonably identify an individual.
Rally analytics present observed activity and outcomes. They do not make definitive claims about why a group succeeded or failed.
3. How we disclose information
We may disclose information as follows:
- To merchants: We provide a merchant with information about its own deals and orders as needed to process purchases, fulfill orders, provide customer service, handle returns or refunds, and fulfill published organizer rewards.
- To Muse or another connected service: When you connect Rally and make a request, we exchange the minimum group, deal, account, or payment-status information reasonably needed to complete that request. Your use of the connected service is also subject to that provider’s terms and privacy notice.
- To service providers: We may use hosting, analytics, communications, authentication, security, and other vendors that process information for us under contractual restrictions.
- For legal and safety reasons: We may disclose information if required by law or if reasonably necessary to protect rights, safety, property, users, or the integrity of the Services.
- For a business transaction: Information may be disclosed in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to applicable law.
- With your direction or consent: We may disclose information when you ask us to or otherwise consent.
4. Merchant data separation
A merchant can access group, order, and performance data for that merchant’s own deals only. Rally does not provide a merchant with another merchant’s identifiable customer, deal, or performance data. We may use aggregated or de-identified information across the Services when it does not reasonably identify a person or reveal another merchant’s confidential business information.
Merchants receive personal information as independent sellers and may use it under their own privacy notices. Contact the relevant merchant about its handling of order, fulfillment, return, or customer-service information.
5. Data retention
We retain personal information for as long as reasonably necessary to provide the Services, maintain business and transaction records, resolve disputes, enforce agreements, protect the Services, and meet legal obligations. Retention periods vary by the type of information and the reason it is held. We may retain aggregated or de-identified information where permitted by law.
6. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Your choices and rights
Depending on where you live, you may have the right to request access to, correction of, deletion of, or a copy of your personal information, or to object to or restrict certain processing. You may also withdraw consent where processing relies on consent.
To make a privacy request, email hello@echoaisms.com. We may need to verify your identity and authority before completing a request. We will respond as required by applicable law. You may also manage cookies through your browser settings, although disabling certain cookies may affect service functionality.
For information held by a merchant as the seller, contact that merchant directly. We may direct merchant-specific requests to the relevant merchant.
8. Children’s privacy
The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can review and, where appropriate, delete it.
9. International use
Echo AI is based in the United States. If you access the Services from another country, your information may be processed in the United States or other countries where we or our service providers operate, subject to applicable safeguards and law.
10. Changes to this policy
We may update this Privacy Policy as the Services change. We will post the updated policy with a revised “Last updated” date and provide additional notice when required by law.
11. Contact us
For privacy questions or requests, contact:
Echo AI LLC
Email: hello@echoaisms.com
State of registration: Washington, United States