What we collect and what we do with it.

Who we are

Red Spruce Labs LLC, operated by Chad Wallace in Washington, DC. Questions about anything here go to hello@redsprucelabs.ai.

The intake form

When you use the form we collect your name, email, company, which path you chose, and what you wrote. The submission is stored in our database so we can read it and follow up. It is not sent to an AI model.

We use what you send to reply to you. We do not sell it, share it for marketing, or use it to train AI models, and the providers we use are not permitted to train on it either. Please leave out customer or employee names, account numbers, and anything else you would not want a third-party service to store.

The client portal

If your company works with us, you get an invite-only login. We store your email, your name if you give it, and the engagement records we write: scopes, deliverables, statements of work, and status updates. Sign-in uses a one-time email link. There are no passwords.

Cookies

We use no advertising or tracking cookies. We count visits to the public pages with Vercel Web Analytics, which uses no cookies and does not identify you: each visit is recorded anonymously, with the page, the referring site, your approximate location, and your browser and device type. Vercel, our host, may set a temporary security cookie when it checks that a visit comes from a real browser. It expires after about an hour and is not used for analytics or advertising. Signing in to the portal sets cookies that keep you signed in. We set no other cookies.

Who processes it

The site is hosted on Vercel, which also provides the visit counts. The database and sign-in run on Supabase, in the United States. For client engagements, AI drafting uses commercial model providers under business terms, or models we run ourselves. Each processes data only to provide its service to us.

How long we keep it

Intake submissions are kept for twelve months, then deleted. Client engagement records are kept for the length of the engagement and three years after, for tax and contract reasons. Email us to have your intake submission deleted sooner.

Where this applies

We work with businesses in the United States. This site and the portal are not directed to individuals in the European Union, the United Kingdom, or other regions with their own data rules.

Changes

If this policy changes, the date at the top changes with it.