Ambassador Privacy Notice

REVRCEL Ambassador Privacy Notice

REVRCEL LLC · Effective October 3, 2026 · Term through October 3, 2027 · Revision 2026.1

1. Scope

This Notice describes how REVRCEL processes personal information of applicants, Ambassadors, former Ambassadors, and related business contacts in the Program. It does not describe patient protected health information or authorize Ambassadors to receive patient information.

2. Information we process

We may process:

• identity, age, contact, residence, business entity, and account information;
• social-account identifiers, handles, profile images, approved OAuth scopes, and connected-account status;
• training, assessment, certification, acknowledgment, and compliance records;
• Approved Content access, links, clicks, non-health attribution, Eligible Transactions, tiers, calculations, payouts, returns, chargebacks, and disputes;
• Form W-9 or other tax status, taxpayer-identification data through a secure provider, withholding, and reporting;
• tokenized payout destination, payment status, and financial-institution metadata;
• public Program content, URLs, captions, disclosures, audience settings, and platform enforcement;
• support, complaint, investigation, and legal communications;
• device, IP address, browser, session, authentication, fraud, and security logs;
• background, sanctions, identity, and business verification where lawful; and
• preferences, consent, and deletion or rights-request records.

REVRCEL must not disclose patient identity, condition, treatment, prescription, appointment, lab, or other health information in an Ambassador dashboard or statement.

3. Sources

We obtain information from you; your device; approved social-login and payout providers; public social accounts; REVRCEL systems; customers only through minimized non-health transaction attribution; payment and fraud vendors; compliance and sanctions sources; and regulators or other lawful sources.

4. Purposes

We use information to:

• evaluate eligibility and create an account;
• authenticate, secure, and support the Program;
• connect approved social accounts;
• deliver and track training and certifications;
• manage Approved Content, links, attribution, compensation, payout, tax, and accounting;
• monitor compliance and public Program content;
• prevent fraud, abuse, diversion, security incidents, and unlawful conduct;
• investigate complaints and enforce Program documents;
• comply with tax, sanctions, legal, regulatory, audit, and recordkeeping duties;
• improve Program functionality using approved, minimized analytics; and
• send Program operations or optional marketing communications.

5. Recipients

We may disclose information to:

• hosting, security, identity, social OAuth, training, support, communications, analytics, payment, payout, tax, and professional-service vendors;
• financial institutions and tax authorities;
• professional advisers, auditors, insurers, and financing or transaction counterparties under safeguards;
• platforms when investigating impersonation, infringement, or policy violations; and
• government, regulators, courts, or other persons as law permits or requires.

Final processor and third-party list: the Ambassador Portal asset library.

6. Social accounts

The connection screen must state the exact permissions requested. REVRCEL will not post, message, read unrelated content, or access additional account data unless separately and expressly authorized. You may disconnect an account, but historical Program, security, compliance, and legal evidence may be retained.

7. Tax and payout data

Submit sensitive tax and banking information only through the Program's approved payments provider. REVRCEL limits access and uses the data for identity, payout, tax, sanctions, fraud, and legal purposes. The final notice must identify whether REVRCEL receives the full taxpayer identifier or only a verification result and masked value.

8. Public monitoring

REVRCEL may review public content reasonably connected to the Program, including registered accounts, REVRCEL marks, links, disclosures, and public claims. It will not represent that public monitoring authorizes access to private accounts or protected activity.

9. Cookies and analytics

The final notice and consent tool must identify cookies, SDKs, session replay, pixels, purposes, recipients, retention, and choices. Advertising tools must not receive tax, banking, identity-document, compliance-investigation, credential, or sensitive account data.

Final factual statement on sale/share/targeted advertising: as published in the Ambassador Portal.

10. Retention

REVRCEL will apply a category-specific schedule based on contract administration, limitation periods, tax and accounting law, payout disputes, consent evidence, security, fraud, investigations, sanctions, and rights.

Final schedule: as published in the Ambassador Portal.

11. Security

REVRCEL uses safeguards designed for the sensitivity of the information, such as role-based access, encryption, logging, multifactor authentication, vendor review, and incident response where appropriate. No system is perfectly secure. Report suspected compromise to legal@revrcel.com.

12. Rights and choices

Depending on location, you may have rights to access, correct, delete, receive a portable copy, withdraw consent, opt out of certain sale/share/targeted advertising, limit sensitive-data processing, and appeal a denial. Submit through the Ambassador Portal or legal@revrcel.com.

REVRCEL may verify identity and may retain information exempt from deletion, such as tax, transaction, security, legal, and acceptance evidence. Marketing opt-out does not stop required Program communications.

Worker and applicant privacy rights may differ by state. State addenda: as published in the Ambassador Portal.

13. International processing

The Program is available only in the United States. If cross-border processing occurs, the final notice will identify controller, destination, legal basis, safeguards, and local rights.

14. Changes

REVRCEL will post the current Notice and provide legally required notice or consent for a material new purpose, recipient, or practice.

15. Contact

REVRCEL LLC REVRCEL LLC, Legal Department Privacy: legal@revrcel.com Requests/appeals: the Ambassador Portal