Privacy Policy

R8 Labs (“R8 Labs,” “we,” “us,” or “our”) operates the website at r8labs.ai and provides portfolio intelligence software to private equity firms and their portfolio companies (the “Services”). This Privacy Policy describes how we collect, use, and share information about you when you use our Services.

By using R8 Labs, you agree to the collection and use of information as described in this policy.

1. Information We Collect

Information you provide directly

• Contact information — your email address and, optionally, your name and company name when you join our waitlist, create an account, or use the AI Readiness Diagnostic.
• Assessment responses — answers you provide when completing the AI Readiness Diagnostic, including information about your organization’s finance operations, technology stack, and private equity context.
• Additional context — any optional free-text information you provide about your portfolio company or operating environment.
• Account credentials — email and password if you create a Vantage or Meridian account.
• Financial data — if you connect a portfolio company to the Vantage platform, we process financial data you upload or sync, including income statements, balance sheets, and KPI data.

Information collected automatically

• Usage data — pages visited, features used, time spent, and navigation patterns within the platform.
• Device and browser information — IP address, browser type, operating system, and referring URLs.
• Cookies and similar technologies — session cookies necessary for authentication and platform functionality. We do not use third-party advertising cookies.

2. How We Use Your Information

• Provide, operate, and improve the Services.
• Generate and deliver your AI Readiness Diagnostic report.
• Send transactional emails — including your assessment results, purchase receipts, and account notifications.
• Follow up about your assessment results or platform trial (you may opt out at any time).
• Respond to your support requests and inquiries.
• Detect and prevent fraud, abuse, or security incidents.
• Comply with legal obligations.

We do not sell your personal information to third parties. We do not use your portfolio company’s financial data for any purpose other than providing your requested Services.

3. How We Share Your Information

We share information only as described below:

• Service providers — we use the following sub-processors to operate the platform:
  • Supabase — database hosting and authentication (United States)
  • Vercel — web hosting and edge delivery (United States)
  • Resend — transactional email delivery (United States)
  • Stripe — payment processing. Stripe handles all payment card data; R8 Labs never stores or processes card numbers directly.
• Legal requirements — if required by law, court order, or governmental authority.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide Services. Assessment responses and generated reports are retained for 3 years to support follow-up engagements. You may request deletion at any time by contacting us at hello@r8labs.ai.

5. Security

We implement industry-standard security measures including encrypted data transmission (TLS), encrypted storage, role-based access controls, and row-level security in our database. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Your Rights and Choices

Depending on your location, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your personal information.
• Opt out of marketing communications (each email includes an unsubscribe link).
• Object to or restrict certain processing activities.

To exercise any of these rights, contact us at hello@r8labs.ai. We will respond within 30 days.

7. Children’s Privacy

Our Services are intended for business professionals and are not directed at individuals under 18. We do not knowingly collect personal information from minors.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email and will update the “Last updated” date above. Continued use of the Services after changes constitutes acceptance of the revised policy.

9. Contact Us

For questions, requests, or concerns about this Privacy Policy or our data practices, please contact: