Privacy Policy

Last Updated: September 12, 2026

Rare Earth Inc., doing business as PilotLight (“PilotLight,” “we,” “us,” or “our”), respects your privacy. This Privacy Policy describes how we collect, use, disclose, and protect personal information in connection with the PilotLight website and services (collectively, the “Service”).

1. Information We Collect

Customer and business information. We may maintain information relating to customers and their representatives, including names, business email addresses, company affiliations, service status, service configurations and preferences, notification and reporting settings, communications, and service activity or history.

Publicly available information. In providing the Service, we may process information available from publicly accessible third-party sources. This may include publicly displayed identifiers, profile links, content, titles, timestamps, URLs, contextual information, and other information associated with publicly displayed identifiers. Public content may also incidentally contain other personal information that an individual or third party has made publicly available.

PilotLight does not use publicly available source information to build generalized consumer profiles. We may retain limited publicly displayed identifiers and related records as necessary to provide services to our customers, maintain relevant service history, operate and secure the Service, and comply with applicable requirements.

Technical and operational information. We and our service providers may process limited technical information necessary to operate, secure, and troubleshoot the Service and website, such as IP addresses, browser or device information, request information, timestamps, logs, and diagnostic information.

Information you provide to us. If you communicate with PilotLight, including by email, we may process the information contained in your communication and information reasonably necessary to respond.

2. How We Use Information

We use information as reasonably necessary to:

• provide, operate, maintain, and support the Service;
• configure services, notifications, and reports for customers;
• identify and provide information relevant to customer service configurations;
• communicate with customers and provide support;
• administer subscriptions and billing;
• maintain the security, integrity, reliability, and performance of the Service;
• diagnose and resolve technical or operational issues;
• maintain appropriate business, accounting, tax, and operational records;
• comply with applicable legal and regulatory requirements;
• protect our rights, customers, systems, and services; and
• generate and maintain aggregate or deidentified statistics and analyses.

We do not sell or rent personal information. We do not provide personal information to advertisers or use personal information for targeted or behavioral advertising.

3. Payments

Customer payments are processed by third-party payment providers, including Stripe. Payment providers may collect and process information such as billing contact information, payment-method information, transaction information, invoices, and related records in accordance with their own terms and privacy practices.

PilotLight does not store complete payment-card numbers in its application systems.

4. How We Share Information

We may disclose information to service providers and contractors that support the operation of our business and the Service, including providers of hosting, infrastructure, storage, communications, email delivery, payment processing, security, monitoring, diagnostics, and professional services.

We may also disclose information:

• when reasonably necessary to comply with applicable law, legal process, or lawful governmental requests;
• to investigate or prevent fraud, security incidents, misuse, or other harmful activity;
• to protect the rights, property, or safety of PilotLight, our customers, or others;
• to professional advisers such as attorneys, accountants, and auditors; or
• in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction.

We do not sell or rent personal information or share it with advertisers for targeted or behavioral advertising.

5. Security

We use reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

No method of transmission, storage, or security can be guaranteed to be completely secure.

6. Retention

We retain personal information for as long as reasonably necessary to provide and operate the Service, maintain appropriate business and operational records, meet legal and security requirements, and resolve disputes.

Retention periods vary depending on the type of information and the purpose for which it is processed. Information associated with a customer may be retained after cancellation where reasonably necessary for operational, business, security, legal, record-retention, or potential reactivation purposes.

We may retain aggregate or deidentified information for longer periods.

7. International Processing

PilotLight is operated from the United States, and its primary application infrastructure is located in the United States. We and our service providers may process information in the United States and other countries where they or their subprocessors operate. Those countries may have data-protection laws that differ from those in your jurisdiction.

8. Your Privacy Rights

Depending on where you live and applicable law, you may have rights concerning your personal information, which may include rights to request access to, correction of, or deletion of certain personal information.

Privacy inquiries and applicable requests may be submitted to privacy@pilotlight.io.

We may take reasonable steps to verify a request and may retain or decline to delete information where permitted or required by applicable law or where reasonably necessary for security, legal, operational, or record-retention purposes.

We will not unlawfully discriminate against you for exercising applicable privacy rights.

9. Children

PilotLight is a business service and is not directed to children. We do not knowingly solicit personal information directly from children through the PilotLight website or as customers.

If we learn that personal information has been collected directly from a child in a manner prohibited by applicable law, we will take appropriate steps to address it.

10. Third-Party Services and Links

The Service or communications from PilotLight may contain links to or interact with third-party websites and services. PilotLight does not control the privacy or security practices of those third parties.

Information you provide directly to a third party is governed by that third party’s applicable terms and privacy practices.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements.

When we update the policy, we will revise the “Last Updated” date above. If required by applicable law, we will provide additional notice or obtain consent for material changes.

12. Contact

For privacy questions or applicable privacy requests, contact:

Rare Earth Inc. d/b/a PilotLight
privacy@pilotlight.io