Privacy Policy

This Privacy Policy explains how Ring0 Labs, Inc. (“Company”, “we”, “us”, or “our”) collects, uses, and shares information about you when you visit https://r-0.org/ (the “Site”) or otherwise interact with us. By using the Site, you agree to the practices described in this Policy.

The Site collects very little. There are no analytics, no advertising, and no tracking scripts of any kind. Everything below describes something the Site does today. If we add a practice, we will update this Policy and revise the effective date above.

Information We Collect

Information you provide. If you sign up for updates, we collect the email address you type and the time you submitted it. That is the whole record: no name, no company, nothing else. If you write to us at the address below, we receive your message, your email address, and anything else you choose to include.

Information collected automatically. Our hosting provider records standard request data in server logs, such as your IP address, browser type, device and operating system, the pages you request, and the time of each request. We use your IP address for one further purpose: the signup form is limited to five submissions per minute per IP address, so your address is held briefly in our rate-limit store to count those requests.

Investor portal. The investor portal at /raising is protected by a single shared password. We do not ask for your name, your email address, or any other personal detail to enter it, we do not store the password you type, and we do not keep a record of who entered. Nothing about your visit is recorded beyond the server logs described above.

Cookies

The public Site sets no cookies at all. It runs no analytics, no advertising pixels, and no cross-site tracking, and it serves its fonts from our own domain rather than from a third party. The only cookie we set is in the investor portal: a strictly necessary cookie named dataroom_session that keeps you signed in to that area for up to seven days. It holds an expiry time and a signature, nothing else. There is no name, email address, or identifier inside it. Because we do not track you across sites, a Do Not Track or Global Privacy Control signal has nothing to switch off. You can set your browser to refuse cookies, but the investor portal will not stay unlocked without its session cookie.

How We Use Information

We use the information we collect to operate, maintain, and secure the Site; to send you the updates you asked for; to reply to your messages; to control access to the investor portal; to prevent abuse, such as rate limiting the signup form; and to comply with law and enforce our terms. We do not use your information for advertising, and we do not use it for automated decision-making or profiling.

Legal Bases for Processing

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data on these legal bases: your consent, which you give when you submit your email address for updates and can withdraw at any time; our legitimate interests in operating and securing the Site, which cover server logs and rate limiting; and compliance with our legal obligations.

How We Share Information

We do not sell your personal information, we do not share it for cross-context behavioral advertising, and we do not give it to advertisers. We share it only in these cases: with the service providers that run the Site on our behalf, which are Vercel for hosting and server logs and Upstash for storing the update list and the rate-limit counters; when the law, legal process, or a lawful request requires it, or to protect the rights, property, and safety of the Company and others; and in a merger, financing, acquisition, or sale of assets, where the receiving party stays bound by this Policy.

Third-Party Content and Links

The investor portal embeds videos from YouTube and links to documents hosted on Dropbox. When one of those videos loads, or when you open one of those links, that provider receives your IP address and may set its own cookies under its own privacy policy, which we do not control. One demo video is streamed through our own server, so Dropbox does not see your address for that file. The Site also links to other third-party sites. This Policy does not cover them, and we encourage you to read their policies.

International Data Transfers

We are based in the United States, and the two providers that hold your data, Vercel and Upstash, process and store it in the United States. If you use the Site from outside the United States, your information is transferred there, to a country whose data-protection rules may differ from your own. Both providers publish data processing terms that include the European Commission’s standard contractual clauses and apply to our use of their services; those clauses are the transfer mechanism we rely on where the law requires one. We have not appointed a representative in the European Union or the United Kingdom. If you are in either and want to reach us about your data, write to the address in Contact Us and we will answer directly.

Data Retention

We keep personal information only as long as we need it. Email addresses on the update list stay until you remove them, which you can do yourself at https://r-0.org/unsubscribe, or by emailing us. Removal deletes the address from the list; we keep no copy of it afterwards. Rate-limit records hold an IP address for the length of the one-minute window and then expire. Server logs are kept by our hosting provider for a limited period for security and operations. Anything else we keep only as long as the law or a dispute requires.

Data Security

The Site is served over HTTPS. The investor portal cookie is signed, is marked HTTP-only so scripts cannot read it, and is restricted to that part of the Site. We use reasonable administrative, technical, and physical safeguards for the information we hold. No method of transmission or storage is completely secure, so we cannot promise absolute security.

Your Privacy Rights

Depending on where you live, you may have the right to access your personal information, correct it, delete it, receive a copy of it, object to or restrict how we use it, and withdraw your consent. To exercise any of these rights, email angel@r-0.org. We will respond as the law requires, and we will not treat you differently for asking. If you are in the European Economic Area, the United Kingdom, or Switzerland, you also have the right to complain to your local data protection authority.

California residents. In the past twelve months we have collected two categories of personal information under the California Consumer Privacy Act: identifiers, meaning your email address and your IP address, and internet activity, meaning the request data in our server logs. We collect it from you and from your browser, for the business purposes described above, and we disclose it only to the service providers named above. We do not sell or share personal information as California defines those terms, and we do not collect sensitive personal information. You have the right to know, delete, correct, and opt out, and to use an authorized agent. Email angel@r-0.org to exercise them.

Children’s Privacy

The Site is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, contact us and we will delete it.

Changes to This Policy

We may update this Policy. When we do, we will revise the effective date above, and if the change is material we will give a more visible notice. Continuing to use the Site after an update means you accept the revised Policy.

Contact Us

Ring0 Labs, Inc. is the controller of the personal information described in this Policy. For questions about it, or to make a privacy request including deletion of your data, contact Ring0 Labs, Inc., 131 Continental Dr, Suite 305, Newark, Delaware 19713. Email: angel@r-0.org.