Privacy Policy

1. Scope

This policy applies to visitors of our website and to individuals who contact us, subscribe to our updates, download our reports, or otherwise interact with the Services. It does not cover third-party websites we may link to or platforms operated by partners or clients.

2. Information We Collect

We collect information in the following ways:

• Information you submit. When you fill out a form on the site — for example to subscribe to updates, request a report, partner with us, submit data, or contact our team — we collect the fields you provide, which may include your name, business email, company, role, country, and any message you choose to send.
• Information collected automatically. When you browse the Services, our servers and analytics tools may receive standard log data such as IP address, browser type and version, device and operating system identifiers, referring URLs, the pages you visit, the timing of your visits, and approximate location derived from your IP address.
• Cookies and similar technologies. We use cookies, local storage, and similar tracking technologies to keep the site functional, remember preferences, measure performance, and understand how the Services are used. See section 6 for details.
• Information from third parties. We may receive information from service providers we use to run the Services (for example, our forms platform, analytics, and feature-experimentation tools), and from business partners or publicly available sources when relevant.

3. How We Use Information

We use the information we collect to:

• Operate, maintain, secure, and improve the Services;
• Respond to inquiries, fulfill report or partnership requests, and provide customer support;
• Send updates, research, and marketing communications you have opted in to receive;
• Measure engagement, conduct analytics, and develop new features and content;
• Detect, prevent, and address fraud, abuse, and security incidents;
• Comply with applicable legal obligations and enforce our terms.

4. Legal Bases (EEA and UK Visitors)

Where the EU or UK General Data Protection Regulation applies, we process personal information on the following legal bases: your consent (which you may withdraw at any time); the performance of a contract or steps requested by you prior to entering one; our legitimate interests in operating, securing, and improving the Services and communicating with prospective and existing partners; and compliance with our legal obligations.

5. How We Share Information

We do not sell your personal information. We share information only in these circumstances:

• Service providers. Vendors that help us run the Services — including hosting, analytics, email and form processing, customer relationship management, and security tooling — process information on our behalf under contractual confidentiality and data-protection obligations.
• Affiliates. We may share information within Labrynth and its affiliated entities for the purposes described in this policy.
• Legal and safety. We may disclose information when we believe in good faith that disclosure is required by law, legal process, or governmental request, or is necessary to protect the rights, property, or safety of Red Tape Index, our users, or others.
• Business transfers. If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to standard confidentiality protections.

6. Cookies and Analytics

We use cookies and similar technologies that are strictly necessary for the site to function, plus performance and analytics cookies to understand how visitors interact with the Services. You can configure your browser to refuse some or all cookies, but parts of the site may not work as intended if you do. Where required by law, we request your consent before placing non-essential cookies.

We do not currently respond to browser "Do Not Track" signals, as no consistent industry standard has been adopted.

7. Data Retention

We retain personal information for as long as needed to provide the Services, fulfill the purposes outlined in this policy, comply with our legal obligations, resolve disputes, and enforce our agreements. When the information is no longer required, we securely delete or anonymize it.

8. International Transfers

We are based in the United States and operate globally. Information we collect may be processed in countries other than the one in which you reside, including jurisdictions whose data-protection laws differ from yours. Where required, we put appropriate safeguards in place — such as standard contractual clauses — to protect information transferred internationally.

9. Your Rights

Depending on where you live, you may have the right to:

• Request access to the personal information we hold about you;
• Ask us to correct inaccurate or incomplete information;
• Request deletion of your personal information, subject to legal exceptions;
• Object to or restrict certain processing;
• Request a portable copy of information you provided to us;
• Withdraw consent at any time where processing is based on consent;
• Lodge a complaint with your local data-protection authority.

To exercise any of these rights, contact us at the address below. We will verify your request and respond within the timeframe required by applicable law. We will not discriminate against you for exercising your rights.

10. Marketing Communications

If you have opted in to receive newsletters, research, or other marketing communications from us, you can unsubscribe at any time via the link in any such message, or by contacting us. You will continue to receive transactional or service-related messages where relevant.

11. Security

We use reasonable technical and organizational measures designed to protect personal information against loss, misuse, and unauthorized access. No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify you as required by applicable law.

12. Children

The Services are intended for business and professional audiences and are not directed to children under 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

13. Third-Party Links

The Services may contain links to third-party websites and tools. We are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies before sharing information with them.

14. AI and Machine Learning

Red Tape Index uses AI and machine learning technologies to power certain features of the Services. We do not use information you submit through the Services to train public AI models or share it with third-party model providers for training purposes. Any AI-assisted processing is performed in accordance with this Privacy Policy and applicable data-protection law.

15. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Services after changes take effect indicates your acceptance of the updated policy.

16. Contact Us

For questions about this Privacy Policy, data rights requests, or how we handle your information, contact us at privacy@redtapeindex.com.