Privacy Policy — redpoint

Redpoint Labs LLC ("we," "our," or "us") operates the Redpoint Reqs web application and SaaS platform (the "Service"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Service.

By accessing or using our Service, you agree to the collection and use of information in accordance with this policy.

Information We Collect

We practice data minimization. We collect only the limited information necessary to operate, maintain, and secure the Service:

Account Information: When you register for an account, we collect your email address to authenticate you and manage your account.
Project Content: We collect and store the text, files, configurations, and other project data you create, upload, or input while using the Service to provide the application's core functionality.
Usage Logs and Metadata: To ensure platform reliability, track bugs, and maintain security, we automatically collect basic system logs.

How We Use Your Information

We use your data strictly to fulfill our service with you and run our business safely:

To provide, operate, and maintain the core features of the Service.
To authenticate your login and prevent unauthorized access.
To diagnose software issues, fix bugs, and optimize app performance.
To enforce our security measures and protect against fraudulent or malicious activity.

Data Retention and Account Reactivation

We retain your personal information and project content only for as long as your account remains active, or as required to fulfill the operational purposes outlined in this policy.

Following the cancellation or expiration of your service subscription, we may securely store your account profile and project data for a limited period. This archival window is maintained solely for your convenience, allowing you to reactivate your subscription and seamlessly restore your workspace at a later date without losing your historical data.

If you do not reactivate your service within this window, or if you explicitly request permanent removal at any time, your data will be permanently and securely deleted from our active production systems.

Your Rights: Export and Deletion

You retain complete ownership and control over your data. At any time, you have the right to request:

Data Portability (Export): A readable copy of the project content and account data you have stored in our system.
Data Deletion: The permanent erasure of your account, profile details, and project history.

To exercise either of these rights, please contact us.

No Sale of Personal Information

We do not sell, rent, trade, or lease your personal information to third parties. Your data is never monetized or used for behavioral advertising.

Our Role as Data Controller

Redpoint Labs LLC is the data controller of the personal information described in this policy. We determine the purposes and means of processing your data when you use the Service.

Legal Basis for Processing

We process your personal data on the following legal bases:

Performance of a contract: to create and operate your account and deliver the Service you subscribed to.
Legitimate interests: to secure the platform, prevent fraud and abuse, diagnose issues, and improve the Service.
Legal obligation: to comply with tax, accounting, and other applicable laws.
Consent: where required (for example, optional communications), which you may withdraw at any time.

Payment Processing (Paddle as Merchant of Record)

All financial transactions are handled by Paddle.com Market Limited ("Paddle"), which acts as the Merchant of Record and reseller for all our orders. Paddle is responsible for processing payments, managing subscriptions, calculating and remitting sales tax/VAT, issuing invoices, and handling refunds and chargebacks.

When you make a purchase, we share limited personal data (such as your email address, account identifier, and country) with Paddle so it can process your order, fulfil its legal obligations, and provide customer support. Redpoint Labs LLC does not collect, process, or store your credit card or bank account details. Payment data is collected and processed directly by Paddle in accordance with its own Privacy Notice and Buyer Terms.

Data Sharing and Service Providers

We share personal data only with the following categories of recipients:

Merchant of Record: Paddle, for payment processing, subscription management, tax compliance, invoicing, refunds, and buyer support.
Cloud infrastructure providers: hosting, database, and email delivery providers essential to operating the Service.
Professional advisers: legal, accounting, and compliance advisers when reasonably necessary.
Authorities: where required by law or to protect our rights.

These recipients are bound by contractual or legal obligations to use your data only to perform services on our behalf and to keep it secure.

Security

We implement industry-standard administrative and technical safeguards (such as data encryption in transit and at rest) to protect your personal data from unauthorized access, loss, or alteration. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Effective Date" at the top. For material updates, we will notify you via the email address tied to your account.

Contact Us

If you have any questions about this Privacy Policy, your rights, or data handling practices, please reach out to us.