Legal
Privacy Policy
Last updated: July 2026
1. Who we are
Red Carpet Labs operates redcarpetlabs.io and the associated client suite. Contact the data steward at privacy@redcarpetlabs.io.
2. Information we collect
- Contact details you provide in the access request form (name, email, brand, notes).
- Account credentials and profile data for onboarded clients.
- Messages, project data, and contract records generated during an engagement.
- Standard technical logs (IP, user agent, timestamps) for security and diagnostics.
3. How we use it
To evaluate access requests, deliver engagements, operate the client suite, communicate with clients, invoice and receive payment, and comply with legal obligations. We do not sell your personal data.
4. Legal bases
Contract performance, legitimate interests (operating a selective client business), consent (where applicable), and legal obligation.
5. Sharing
We share information only with vetted service providers necessary to run the business (hosting, authentication, payments). Providers act as processors under written terms and may not use data for their own purposes.
6. International transfers
Where data is transferred across borders, we rely on standard contractual clauses or other approved mechanisms.
7. Retention
Access request data is retained for up to 24 months. Client and engagement records are retained for the duration of the engagement plus any period required by law or contract.
8. Your rights
Subject to applicable law, you may request access, correction, deletion, portability, or restriction of your personal data. Contact privacy@redcarpetlabs.io.
9. Security
We use row-level access controls, encrypted transport, and least-privilege administration. No system is perfectly secure; report concerns to security@redcarpetlabs.io.
10. Cookies
See our Cookie Notice.
11. Changes
We may update this Policy. Material changes will be communicated through the Site or the client suite.