Legal · Privacy

Privacy Policy

Last updated: October 2026

RegDataLab is operated by Wasatch Crest Holdings LLC.

1. Information We Collect

1.1 Information You Provide

Account registration details (name, company, email address)
Payment information processed through Stripe (we do not store card numbers)
Communications you send to us (support emails, feedback)
Pilot applications and free supplier snapshot requests (name, work email, company, and the supplier names you enter)

1.2 Information Collected Automatically

API usage data (endpoints called, timestamps, credit consumption)
Technical data (IP address, user agent, request headers)
Device and browser information for bot protection (via Cloudflare Turnstile)
Website usage data (pages viewed, referring site, browser, device type, approximate location derived from your IP address, and actions such as clicking a signup link or completing signup), collected by the analytics services described in section 6

1.3 Information from Third Parties

Bot verification results from Cloudflare Turnstile
Payment status and subscription data from Stripe

2. How We Use Your Information

Provision and maintain your API access
Process payments and manage subscriptions
Enforce rate limits and prevent abuse
Send transactional emails (key issuance, billing, security alerts)
Improve service reliability and performance
Comply with legal obligations
Respond to support requests

3. Third-Party Service Providers

Heroku — Cloud hosting for the API and MCP service (United States)
Vercel — Website hosting and Vercel Web Analytics
Google — Google Analytics 4 website analytics
Sentry — Error monitoring and diagnostics
Stripe — Payment processing
Cloudflare — Bot protection (Turnstile) and CDN

4. Disclosure of Information

We may disclose your information in the following circumstances:

To service providers who assist in operating our platform
To comply with legal obligations, court orders, or government requests
To protect our rights, safety, or property
In connection with a merger, acquisition, or asset sale
With your explicit consent

5. Sale of Personal Data

We do not sell, rent, or trade your personal information to third parties.

6. Cookies, Analytics and Tracking

6.1 Analytics

We use two analytics services on regdatalab.com to understand which pages are used and whether signup works:

Vercel Web Analytics records page views with the page address, referring site, browser, operating system, device type and country. It does not set cookies. Vercel identifies a visit with a hash of the request that is discarded after 24 hours and is not used to track you across sites.
Google Analytics 4 records page views and events such as signup clicks, documentation clicks and completed signups. It sets first-party cookies (for example _ga) and sends data, including your IP address, to Google, which processes it under its own terms. We do not send your name, email address or API key to Google Analytics. You can opt out with the Google Analytics opt-out browser add-on or by blocking cookies for this site.

6.2 Cookies and local storage

Session cookies are used for authentication
UTM parameters and the first referring site are stored in your browser’s session storage for signup attribution
Google Analytics cookies as described above
We do not use advertising pixels, and we do not use analytics data for advertising

7. Data Retention

We retain account data for the duration of your account plus 90 days after deletion. API usage logs are retained for 12 months. Payment records are retained as required by law.

8. Children’s Privacy

Our service is not directed at individuals under the age of 13. If we become aware that we have collected personal information from a child under 13, we will delete it promptly.

9. International Users

Our services are hosted in the United States. By using our service, you consent to the transfer and processing of your data in the United States. We do not guarantee compliance with data protection laws outside of the United States.

10. Your Rights

Access your personal data
Request correction of inaccurate data
Request deletion of your data
Request data portability

To exercise these rights, contact us at hello@runsales.ai.

11. Security Measures

All data transmitted via TLS/HTTPS
API keys are hashed at rest
Access controls and role-based permissions for internal systems
Automated monitoring for unauthorized access

12. Do Not Track Signals

Our service does not currently respond to Do Not Track browser signals.

13. Changes to This Policy

We may update this policy from time to time. Continued use of the service after changes constitutes acceptance of the revised policy.

14. Contact Information

Wasatch Crest Holdings LLC
Email: hello@runsales.ai
Web: regdatalab.com

1. Information We Collect

1.1 Information You Provide

Account registration details (name, company, email address)

Payment information processed through Stripe (we do not store card numbers)

Communications you send to us (support emails, feedback)

Pilot applications and free supplier snapshot requests (name, work email, company, and the supplier names you enter)

1.2 Information Collected Automatically

API usage data (endpoints called, timestamps, credit consumption)

Technical data (IP address, user agent, request headers)

Device and browser information for bot protection (via Cloudflare Turnstile)

Website usage data (pages viewed, referring site, browser, device type, approximate location derived from your IP address, and actions such as clicking a signup link or completing signup), collected by the analytics services described in section 6

1.3 Information from Third Parties

Bot verification results from Cloudflare Turnstile

Payment status and subscription data from Stripe

4. Disclosure of Information

We may disclose your information in the following circumstances:

To service providers who assist in operating our platform

To comply with legal obligations, court orders, or government requests

To protect our rights, safety, or property

In connection with a merger, acquisition, or asset sale

With your explicit consent

6. Cookies, Analytics and Tracking

6.1 Analytics

We use two analytics services on regdatalab.com to understand which pages are used and whether signup works:

Vercel Web Analytics records page views with the page address, referring site, browser, operating system, device type and country. It does not set cookies. Vercel identifies a visit with a hash of the request that is discarded after 24 hours and is not used to track you across sites.

Google Analytics 4 records page views and events such as signup clicks, documentation clicks and completed signups. It sets first-party cookies (for example _ga) and sends data, including your IP address, to Google, which processes it under its own terms. We do not send your name, email address or API key to Google Analytics. You can opt out with the Google Analytics opt-out browser add-on or by blocking cookies for this site.

6.2 Cookies and local storage

Session cookies are used for authentication

UTM parameters and the first referring site are stored in your browser’s session storage for signup attribution

Google Analytics cookies as described above

We do not use advertising pixels, and we do not use analytics data for advertising