Rhythm Innovations Privacy Policy

This Privacy Policy does not apply to third-party websites, services, or platforms not operated by Rhythm. It also does not apply to customer-controlled environments where Rhythm acts solely as a processor or service provider pursuant to customer agreements and customer instructions.

Supplemental regional privacy notices, biometric notices, AI governance notices, cookie notices, or jurisdiction-specific disclosures may apply depending on applicable laws, operational activities, or geographic location.

In many circumstances, Rhythm processes information solely on behalf of customers that determine the purposes and means of processing operational, workforce, fleet, telematics, safety, claims, compliance, or operational intelligence information. In such circumstances, the customer acts as the Data Controller or Business, while Rhythm acts as the Data Processor or Service Provider.

Customers are responsible for establishing lawful bases for processing information and for complying with applicable employment, labor, privacy, telematics, surveillance, biometric, workplace monitoring, operational governance, insurance, and regulatory laws.

Rhythm processes information pursuant to customer instructions, contractual obligations, and applicable legal requirements.

Except as otherwise described in customer agreements, customers retain ownership of customer data processed through the Services. Rhythm acquires no ownership rights in customer operational data, telematics data, claims data, workforce data, customer confidential information, or customer operational intelligence data.

Subject to contractual, operational, and legal requirements, customers may request export of customer-controlled operational data in commercially reasonable formats.

Rhythm seeks to collect and process only the information reasonably necessary to provide, secure, improve, govern, support, and maintain the Services and associated operational intelligence capabilities.

Depending on customer configurations and enabled Services, Rhythm may also process operational intelligence and fleet-related information including VINs, vehicle identifiers, telematics data, GPS location information, dispatch and routing information, licensing and certification status, driver qualification information, maintenance and inspection records, operational readiness information, safety event information, workflow execution data, coaching and intervention records, claims information, incident records, mobile application interaction data, dashcam recordings, and contextual operational intelligence information.

Rhythm may automatically collect technical and device-related information including IP addresses, browser types, operating systems, timestamps, mobile device information, device identifiers, usage analytics, log information, session data, diagnostic information, and operational telemetry.

Rhythm may also collect communications and support information submitted through customer support interactions, webinars, surveys, events, feedback forms, sales inquiries, marketing activities, and communication tools.

Where legally permitted or authorized by customers, Rhythm may process certain categories of regulated or sensitive information including driver license information, medical certification status, compliance records, biometric identifiers, occupational readiness information, camera-related recordings, safety investigation information, and operational governance records. Such information is subject to enhanced confidentiality, governance, access management, and security safeguards.

Rhythm may also collect information through customer-authorized integrations with fleet management systems, telematics providers, HR systems, learning management systems (LMS), maintenance systems, claims systems, insurance platforms, compliance systems, and other operational technologies connected to the Services.

Rhythm may use information to support fleet safety, workforce readiness, compliance management, operational reporting, coaching activities, claims management, incident response, accident investigation, audit support, and related operational and risk management activities.

Operational, telematics, claims, and safety-related information may also be used to support claims investigations, litigation response, insurance-related activities, compliance verification, and operational reporting.

Rhythm may use information to support AI-enabled features and analytics, including recommendations, prioritization indicators, anomaly detection, workflow automation, predictive insights, and safety analytics. AI-generated outputs are intended to support human decision-making and operational oversight.

Rhythm uses information to communicate with customers and users regarding support requests, product updates, webinars, security notices, operational notifications, and marketing communications consistent with applicable law.

Rhythm may also use information to detect fraud, prevent unauthorized activity, enforce agreements and policies, protect systems and infrastructure, comply with legal obligations, and maintain the security and reliability of the Services.

Rhythm’s Responsible AI principles include human oversight and accountability, transparency and explainability, fairness and bias monitoring, governance and auditability, privacy-by-design, security-by-design, operational safety, workforce protection, data minimization, resilience, explainability, ethical operational intelligence, and responsible operational use.

Rhythm may use automated processing and operational intelligence models to generate recommendations, prioritization indicators, workflow triggers, operational insights, predictive analytics, operational readiness indicators, governance analytics, risk indicators, anomaly detection outputs, and safety intelligence.

Rhythm does not intend for automated outputs, scoring mechanisms, predictive indicators, or operational intelligence outputs to replace human judgment, operational governance, or management accountability.

AI-generated outputs should not be used as the sole basis for employment, disciplinary, underwriting, insurance, legal, regulatory, operational, or workforce-related decisions without appropriate human review and governance controls.

Rhythm may evaluate AI and operational intelligence models for performance, reliability, governance, explainability, operational appropriateness, fairness, resilience, and accountability as part of ongoing model risk management and operational governance activities.

Rhythm continuously evaluates evolving AI governance, cybersecurity, privacy, operational intelligence, insurance, and regulatory frameworks including emerging AI governance laws and operational technology standards.

Rhythm maintains governance controls designed to reduce unauthorized AI model training, unintended data exposure, unauthorized access, inappropriate model usage, or unauthorized use of customer operational intelligence information within AI-enabled environments.

Rhythm’s governance framework is designed to prioritize operational safety, prevention, workforce protection, operational readiness, accountability, governance integrity, and responsible operational execution.

Rhythm’s operational intelligence framework is intended to support prevention, resilience, operational accountability, workforce protection, and operational readiness—not invasive or inappropriate surveillance.

Customers control the configuration and deployment of these capabilities and remain responsible for determining the lawfulness of their use. Customers are responsible for providing legally required notices, obtaining required consents, and complying with applicable employment, labor, telematics, surveillance, biometric, union, workplace privacy, insurance, and operational governance laws.

Where biometric, facial analysis, AI-enabled monitoring, or video analytics capabilities are enabled, customers remain responsible for lawful deployment and required notices or consents.

Rhythm is committed to supporting technologies that enhance worker safety, operational readiness, operational accountability, workforce protection, and human dignity.

Rhythm’s Services are enterprise operational platforms and are not designed as consumer advertising or consumer behavioral monetization ecosystems.

Users may control cookie preferences through browser settings or applicable consent management tools. Certain functionality may be impacted if cookies are disabled.

Rhythm may also share information with customer-authorized integrations and APIs including telematics providers, HR systems, LMS systems, maintenance systems, claims systems, insurance platforms, operational systems, workflow orchestration systems, compliance systems, and fleet management platforms.

Rhythm maintains API and integration governance controls designed to support secure authentication, authorized access, integration accountability, secure connectivity, customer-controlled permissions, and lawful operational data sharing.

Rhythm may disclose information where necessary to comply with applicable law, legal process, lawful governmental requests, regulatory obligations, operational governance obligations, or to protect rights, safety, workers, customers, users, systems, infrastructure, or the integrity of the Services.

Rhythm reviews governmental and legal requests to help ensure validity, scope, and legal appropriateness prior to disclosure where legally permitted.

In connection with mergers, acquisitions, financing transactions, restructuring activities, or asset sales, information may be transferred as part of the applicable business transaction subject to appropriate confidentiality and legal safeguards.

Rhythm may also use aggregated, anonymized, or de-identified information for benchmarking, analytics, operational intelligence research, governance analysis, operational resilience analysis, product improvement, industry insights, and platform optimization activities. Such information is not intended to identify individuals.

Rhythm maintains confidentiality safeguards designed to limit unauthorized disclosure, access, or misuse of customer confidential information and applies role-based access controls and least-privilege principles designed to restrict access to authorized personnel with legitimate business needs.

Rhythm also maintains operational logging, observability, traceability, governance telemetry, and operational accountability controls designed to support resilience, auditability, security, governance integrity, and operational reliability.

Customers remain responsible for ensuring that deployment and use of the Services comply with applicable operational, employment, privacy, insurance, and regulatory requirements.

Retention periods may vary depending on customer configurations, operational requirements, legal requirements, insurance obligations, customer agreements, governance requirements, and the nature of the information involved. Certain retention periods may be configurable by customers based on operational, litigation, insurance, regulatory, governance, or compliance requirements.

Certain categories of operational, telematics, compliance, incident, governance, litigation, audit, claims, and security-related information may be retained for extended periods where necessary to support operational accountability, legal defense, litigation holds, operational investigations, insurance activities, regulatory obligations, or operational governance requirements.

Security measures may include encryption in transit and at rest, role-based access controls, multi-factor authentication, operational monitoring, vulnerability management, secure development practices, operational logging, network segmentation, incident response procedures, resilience testing, disaster recovery planning, business continuity planning, and operational resilience governance.

Rhythm applies layered security principles including defense-in-depth, least privilege, segmentation, monitoring, governance telemetry, and Zero Trust-oriented security controls.

Rhythm maintains controls designed to logically segregate customer environments and customer data within multi-tenant infrastructure environments.

Rhythm continuously evaluates alignment with industry-recognized cybersecurity frameworks and security best practices including principles associated with SOC 2, ISO 27001, NIST, CIS Controls, Zero Trust architectures, operational resilience frameworks, and governance-oriented cybersecurity standards.

As an operational intelligence platform supporting mission-critical workflows, Rhythm is committed to maintaining platform resilience, operational continuity, operational governance integrity, service reliability, operational accountability, and enterprise-grade governance resilience.

While Rhythm strives to maintain strong security protections, no system can guarantee absolute security.

Where required by applicable law or contractual obligations, Rhythm may provide notice of qualifying security incidents in accordance with applicable legal and contractual requirements.

Where required by applicable law, Rhythm implements safeguards for cross-border data transfers including contractual protections, Standard Contractual Clauses, recognized transfer mechanisms, organizational safeguards, and appropriate technical protections.

Individuals seeking to exercise applicable privacy rights may contact Rhythm at privacy@rhythminnovations.com. Rhythm may verify identity before processing requests and may require additional verification documentation for authorized agents acting on behalf of individuals.

Rhythm will not discriminate against individuals for exercising applicable privacy rights.

Individuals may also lodge complaints with their local supervisory authority where permitted by law.

Privacy and security considerations are incorporated into product development, AI governance, operational governance, resilience planning, access management, workflow orchestration, integration design, data lifecycle management, system architecture, operational intelligence workflows, and governance controls.

Updated versions will be posted on the website together with revised effective dates.

13450 West Sunrise Blvd, Suite 420
Sunrise, Florida 33323, USA

Email: privacy@rhythminnovations.com

Website: www.rhythminnovations.com

Rhythm is committed to advancing enterprise-grade privacy governance, operational intelligence governance, responsible AI, operational resilience, cybersecurity resilience, ethical technology practices, lawful risk management, workforce protection, operational accountability, governance integrity, and transparent operational governance.

Our objective is to help organizations improve safety, operational readiness, compliance, operational resilience, workforce protection, governance maturity, operational accountability, and enterprise risk intelligence while respecting privacy, transparency, lawful governance, accountability, and the dignity of frontline workers, contractors, drivers, operators, and employees.